Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0.5 does not consider that NULL is a valid getPath return value, which allows remote authenticated users to bypass intended access restrictions and gain access to users files via a sharing link to a file with a deleted parent folder.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OwnCloud Server virtual filesystem组件安全漏洞
Vulnerability Description
OwnCloud是德国OwnCloud公司的一套免费且开源的个人云存储解决方案；OwnCloud Server是一个服务器版。virtual filesystem是其中的一个虚拟文件系统组件。 OwnCloud Server的virtual filesystem组件中存在安全漏洞，该漏洞源于程序没有正确处理‘getPath’函数的‘null’返回值。远程攻击者可借助父文件夹已删除的文件的共享链接，利用该漏洞绕过既定的访问限制，获取用户文件的访问权限。以下版本受到影响：OwnCloud Server 6.0
CVSS Information
N/A
Vulnerability Type
N/A