7.8
Élevée
CVE-2017-9286 The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts…
Description
The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| nextcloud 11.0 | premières → < 11.0.3-3.1 | 11.0.3-3.1 |