Lucene search

K
osvGoogleOSV:CVE-2017-0885
HistoryApr 05, 2017 - 8:59 p.m.

CVE-2017-0885

2017-04-0520:59:00
Google
osv.dev
15

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

17.2%

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages.

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

17.2%