Vulnerability · Published Jun 1, 2021 · Assigned by GitHub_M
CVE-2021-32654Attacker can obtain write access to any federated share/public link
High 8.1
In plain English
A high-severity authorization bypass via user-controlled key in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities).
Official description
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to receive write/read privileges on any Federated File Share. Since public links can be added as federated file share, this can also be exploited on any public link. Users can upgrade to patched versions (19.0.11, 20.0.10 or 21.0.2) or, as a workaround, disable federated file sharing.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | < 19.0.11>= 20.0.0, < 20.0.10>= 21.0.0, < 21.0.2 |
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-jf9h-v24c-22g5 x_refsource_CONFIRM
- https://hackerone.com/reports/1170024 x_refsource_MISC
- GLSA-202208-17 vendor-advisory, x_refsource_GENTOO