阿里云漏洞库

漏洞描述

Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and normalizing the string in the wrong order. The function is used in the `newFile()` and `newFolder()` items, which may allow to creation of paths outside of ones own space and overwriting data from other users with crafted paths. This issue has been addressed in versions 25.0.2, 24.0.8, and 23.0.12. Users are advised to upgrade. There are no known workarounds for this issue.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-273...
https://github.com/nextcloud/server/pull/35074

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	nextcloud	nextcloud_server	*		Up to (excluding) 23.0.12
	运行在以下环境
	应用	nextcloud	nextcloud_server	*	From (including) 20.0.0	Up to (excluding) 20.0.14
	运行在以下环境
	应用	nextcloud	nextcloud_server	*	From (including) 21.0.0	Up to (excluding) 21.0.9
	运行在以下环境
	应用	nextcloud	nextcloud_server	*	From (including) 22.2.0	Up to (excluding) 22.2.10
	运行在以下环境
	应用	nextcloud	nextcloud_server	*	From (including) 23.0.0	Up to (excluding) 23.0.12
	运行在以下环境
	应用	nextcloud	nextcloud_server	*	From (including) 24.0.0	Up to (excluding) 24.0.8
	运行在以下环境
	应用	nextcloud	nextcloud_server	*	From (including) 25.0.0	Up to (excluding) 25.0.2
	运行在以下环境
	系统	opensuse_Leap_15.4	nextcloud	*		Up to (excluding) 23.0.12-bp154.2.3.1

攻击路径

本地
攻击复杂度

复杂
权限要求

普通权限
影响范围

越权影响
EXP成熟度

未验证
补丁情况

官方补丁
数据保密性

无影响
数据完整性

无影响
服务器危害

无影响
全网数量

N/A

CWE-ID	漏洞类型
CWE-22	对路径名的限制不恰当（路径遍历）

中危 Nextcloud 安全漏洞

漏洞描述

解决建议

参考链接

受影响软件情况