Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102875
HistoryOct 28, 2021 - 12:00 a.m.

Nextcloud Richdocuments Information Disclosure Vulnerability

2021-10-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
nextcloud
richdocuments
information disclosure
vulnerability
file synchronization
sharing
germany
exploit
full path leak
shared files
application platform
open source
self-hosted

EPSS

0.001

Percentile

37.0%

Nextcloud is a set of open source self-hosted file synchronization and sharing communication applications platform from Germany-based Nextcloud. nextcloud Richdocuments application in versions prior to 3.8.6 and 4.2.3 is vulnerable to an information disclosure vulnerability where the vulnerable application returns verbatim exception messages to the user. An attacker could exploit this vulnerability to cause a full path leak of shared files.

EPSS

0.001

Percentile

37.0%

Related for CNVD-2021-102875