CVE-2022-41970
Nextcloud Server's disabled download shares still allow download through preview images
Vexday Risk Score
8Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 2.6EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
01 dez 2022Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through preview images. Images could be downloaded and previews of documents (first page) can be downloaded without being watermarked. Versions 24.0.7 and 25.0.1 contain a fix for this issue. No known workarounds are available.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Produtos afetados
nextcloud · security-advisoriesQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →