地图 / admin_audit does not log actions on files in a group folder

admin_audit does not log actions on files in a group folder

信息泄露 / Insufficient Logging / #2890071

厂商: Nextcloud
严重程度: 低危 · CVSS 4.3
赏金: —
弱点: Insufficient Logging
研究员: @klipz
披露日期: 2025-12-05
资产: nextcloud/server
CVE: CVE-2025-66552

该报告还没有中文解读。

时间线

2024-12-09报告提交
2025-12-05公开披露

阅读 HackerOne 原文 ↗作者 @klipz · 版权归作者与 Nextcloud 所有

同类报告

Non-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · 2025-03-24 Non-Production API Endpoints for the Amazon S3 Tables Service Fails to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · 2026-07-02 (Part 2) Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · 2025-04-08 Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · 2025-02-26 Non-Production API Endpoints for the DocumentDB Elastic Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · 2025-03-11 Non-Production API Endpoint for the ElastiCache Service Fails to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · 2025-04-25