by Kastro
Paper/Archive/CVE-2021-32654

CVE-2021-32654

nextcloud security-advisories — Attacker can obtain write access to any federated share/public link

EPSS 2%CVSS 9.1
critical.is priorityof 100
43
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 79.1.791 × 2015.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to receive write/read privileges on any Federated File Share. Since public links can be added as federated file share, this can also be exploited on any public link. Users can upgrade to patched versions (19.0.11, 20.0.10 or 21.0.2) or, as a workaround, disable federated file sharing.

Affected

ProductAffectedFixed inSource
security-advisories< 19.0.11–CNA
security-advisories>= 20.0.0, < 20.0.10–CNA
security-advisories>= 21.0.0, < 21.0.2–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
GitHub_M (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgithub.com/nextcloud/security-advisories/security/advisories/GHSA-jf9h-v24c-22g5refhackerone.com/reports/1170024advisorysecurity.gentoo.org/glsa/202208-17