Vigilance.fr - Nextcloud: directory traversal via Folder::getFullPath(), analyzed on 04/04/2023
June 2023 by Vigilance.fr
An attacker can traverse directories of Nextcloud, via Folder::getFullPath(), in order to write a file outside the service root path.
See previous articles
See next articles
Your podcast HereNew, you can have your Podcast here. Contact us for more information ask:
Marc Brami
Phone: +33 1 40 92 05 55
Mail: ipsimp@free.fr
All new podcasts
News
