CVE-2024-22404

CVE-2024-22404 is a permissions-bypass in the Nextcloud Files ZIP app. In affected versions, users can download view-only files by zipping an entire folder, bypassing intended access restrictions. Supported mitigations include upgrading the Files ZIP app to version 1.2.1, 1.4.1, or 1.5.0, or disa...