Read-only share recipient can restore old versions of file (NC-SA-2016-005)

ID NC-SA-2016-005
Type nextcloud
Reporter Rudra Pratap Singh
Modified 2016-07-19T00:00:00


The restore capability of Nextcloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions.