Lucene search
+L

7 matches found

Prion
Prion
•added 2017/04/05 8:59 p.m.•31 views

Design/Logic Flaw

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit file...

5.5CVSS6.2AI score0.00593EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2017/04/05 8:59 p.m.•34 views

CVE-2017-0883

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit file...

6.4CVSS6.2AI score0.00593EPSS
SaveExploits0References2
OSV
OSV
•added 2017/04/05 8:59 p.m.•89 views

CVE-2017-0883

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit file...

6.4CVSS6.5AI score
SaveExploits0References2
CVE
CVE
•added 2017/04/05 8:00 p.m.•93 views

CVE-2017-0883

CVE-2017-0883 affects Nextcloud Server before 9.0.55 and 10.0.2, where a permission escalation in the OCS sharing API allows an authenticated user to reshare items with elevated permissions. The issue enables an attacker to edit files in a share despite having only read access for folders/files t...

6.4CVSS6.1AI score0.00593EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2017/04/05 8:00 p.m.•4 views

CVE-2017-0883

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit file...

6.4CVSS0.00593EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/04/05 8:00 p.m.•51 views

CVE-2017-0883

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit file...

6.2AI score0.00593EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/05 12:00 a.m.•6 views

CVE-2017-0883: Incorrect Permission Assignment for Critical Resource

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit file...

6.4CVSS5.8AI score0.00593EPSS
SaveExploits0References3
Rows per page
Query Builder