Description (CNA)
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Nextcloud / Nextcloud Server | affected All versions before 9.0.55 and 10.0.2 |
CWE
CWE-209
References
ADP enrichment
No English description supplied.