Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2023/04/28 9:52 a.m.25 views

Nextcloud: Text does not respect 'Allow download' permissions

A security vulnerability was discovered in Nextcloud that allowed users to bypass the 'Allow download' permission for sensitive images shared in a folder. This vulnerability allowed unauthorized users to download the images, potentially leading to the leakage of sensitive information...

4.3CVSS4.5AI score0.0047EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/10/26 12:0 a.m.8 views

websvn 操作系统命令注入漏洞

websvn is a software application. An online Subversion repository viewer. An operating system command injection vulnerability exists in WebSVN. The vulnerability stems from a flaw found in WebSVN 2.3.2. Without prior authentication, if the "allowDownload" option is enabled in config.php, an...

9.8CVSS8.7AI score0.02579EPSS
SaveExploits1References2
Rows per page
Query Builder