CVE-2023-25579

Nextcloud server is a self hosted home cloud product. In affected versions the "OC\Files\Node\Folder::getFullPath" function was validating and normalizing the string in the wrong order. The function is used in the "newFile" and "newFolder" items, which may allow to creation of paths outside of on...