high8.1
CVE-2020-8153
Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.
Impact
Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Group Folders | before 4.0.4 |
| Fedoraproject | Fedora | Version 32 |
Weakness classification
References
- NVD record
- CVE.org record
- https://hackerone.com/reports/642515
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/
- https://nextcloud.com/security/advisory/?id=NC-SA-2020-017
- https://hackerone.com/reports/642515
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/
- https://nextcloud.com/security/advisory/?id=NC-SA-2020-017