Lucene search

K
nextcloudSecatorNC-SA-2017-002
HistoryFeb 05, 2017 - 12:00 a.m.

Creation of folders in read-only folders despite lacking permissions (NC-SA-2017-002)

2017-02-0500:00:00
secator
nextcloud.com
13

EPSS

0.001

Percentile

17.2%

Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder.Note that this only affects folders and files that the adversary has at least read-only permissions for.

EPSS

0.001

Percentile

17.2%