CVE-2016-9468: falha em Nextcloud Server & ownCloud Server Nextcloud…
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.1%
Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app. The exception message displayed on the DAV endpoints contained partially user-controllable input leading to a potential misrepresentation of information.
Produtos afetados
n/a · Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2Referências
https://github.com/nextcloud/server/commit/7350e13113c8ed484727a5c25331ec11d4d59f5fhttps://github.com/nextcloud/server/commit/a4cfb3ddc1f4cdb585e05c0e9b2f8e52a0e2ee3ehttps://github.com/owncloud/core/commit/96b8afe48570bc70088ccd8f897e9d71997d336ehttps://github.com/owncloud/core/commit/bcc6c39ad8c22a00323a114e9c1a0a834983fb35https://hackerone.com/reports/149798https://nextcloud.com/security/advisory/?id=nc-sa-2016-011https://owncloud.org/security/advisory/?id=oc-sa-2016-021