Skip to content

Default share permissions not respected for federated reshares

Low
LukasReschke published GHSA-6f6v-h9x9-jj4v Jul 12, 2021

Package

Nextcloud Server

Affected versions

< 19.0.13, < 20.0.11, < 21.0.3

Patched versions

19.0.13, 20.0.11, 21.0.3

Description

Impact

Default share permissions were not being respected for federated reshares of files and folders.

Patches

It is recommended that the Nextcloud Server is upgraded to 19.0.13, 20.0.11 or 21.0.3

Workarounds

None.

References

For more information

If you have any questions or comments about this advisory:

Severity

Low

CVE ID

CVE-2021-32725

Weaknesses

Credits