Lucene search

HackeroneCVELIST:CVE-2020-8153

HistoryMay 12, 2020 - 1:01 p.m.

CVE-2020-8153

2020-05-1213:01:33

CWE-284

hackerone

www.cve.org

AI Score

Confidence

High

EPSS

0.001

Percentile

46.7%

JSON

Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.

CNA Affected

[
  {
    "product": "Nextcloud Groupfolders",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.4"
      }
    ]
  }
]

References

hackerone.com/reports/642515

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/

nextcloud.com/security/advisory/?id=NC-SA-2020-017