Notes app can be tricked into using a received share created before the user logged in

业务逻辑 / 业务逻辑错误 / #2254151

厂商

Nextcloud

严重程度

低危 · CVSS 6.7

赏金

—

弱点

业务逻辑错误

研究员

@maholli

披露日期

2024-06-19

资产

nextcloud/server

CVE

CVE-2024-37317

该报告还没有中文解读。