Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102880
HistoryOct 28, 2021 - 12:00 a.m.

Nextcloud file traversal vulnerability

2021-10-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
20

0.002 Low

EPSS

Percentile

53.6%

Nextcloud is an open source set of self-hosted file synchronization and sharing communication applications platform from Germany-based Nextcloud. nextcloud has a file traversal vulnerability in versions prior to 20.0.13, 21.0.5, and 22.2.0, which stems from a lack of authentication, access control, permission management, and other security measures in the network system or product. An attacker is able to download arbitrary SVG images, including user-supplied files, from the host system.

0.002 Low

EPSS

Percentile

53.6%