CVE-2022-41970
Nextcloud Server's disabled download shares still allow download through preview images
概要
Nextcloud Server's disabled download shares still allow download through preview images
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through preview images. Images could be downloaded and previews of documents (first page) can be downloaded without being watermarked. Versions 24.0.7 and 25.0.1 contain a fix for this issue. No known workarounds are available.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web hackerone.com