7.8
High
CVE-2017-9286 The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts…
Description
The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| nextcloud 11.0 | earliest → < 11.0.3-3.1 | 11.0.3-3.1 |