CVE-2017-9286: high-severity vulnerability in SUSE nextcloud
nextcloud package security issues with /srv/www/htdocs
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 1.2%
exploitation probability
1.2%top 32% of all CVEs
observed exploitation
nono source reports it
The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
SUSE · nextcloud