CVE-2019-15621
Fixed in a distro release EPSS 1%
Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link.
Products: nextcloud_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 12 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.6.1 |
| openSUSE Leap 15.1 | nextcloud | 15.0.14-bp151.3.3.1 |