CVE-2017-0885
CVE-2017-0885
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Apr 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages.
Affected products
Nextcloud · Nextcloud ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →