CVE-2021-37628
In affected versions the File Drop features ("Upload Only" public link shares in Nextcloud) can be bypassed using the Nextcloud Richdocuments app.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.09%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Upload Only" public link shares in Nextcloud) can be bypassed using the Nextcloud Richdocuments app. An attacker was able to read arbitrary files in such a share. It is recommended that the Nextcloud Richdocuments is upgraded to 3.8.4 or 4.2.1. If upgrading is not possible then it is recommended to disable the Richdocuments application.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 2.09% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-639
- Affected
- nextcloud/richdocuments
- Source
- security-advisories@github.com
References
- https://github.com/nextcloud/richdocuments/pull/1664Patch, Third Party Advisory
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-pxhh-954f-8w7wThird Party Advisory
- https://hackerone.com/reports/1253403Permissions Required, Third Party Advisory
- https://github.com/nextcloud/richdocuments/pull/1664Patch, Third Party Advisory
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-pxhh-954f-8w7wThird Party Advisory
- https://hackerone.com/reports/1253403Permissions Required, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.