Lucene search

K
nextcloudCarl PearsonNC-SA-2020-032
HistoryJul 10, 2020 - 12:00 a.m.

Linux client is vulnerable to directory traversal when downloading files (NC-SA-2020-032)

2020-07-1000:00:00
Carl Pearson
nextcloud.com
13

0.013 Low

EPSS

Percentile

85.8%

Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.

CPENameOperatorVersion
nextcloud desktoplt2.6.5

0.013 Low

EPSS

Percentile

85.8%