Allows any user to share their "Root" level folder by sharing "."
访问控制 / 访问控制缺陷（通用） / #889795
该报告还没有中文解读。
原文摘录
摘自原文（3132 字符中的一小部分）
There seems to be a bug in the "File to Share" feature of Nextcloud Talk. This allows any authenticated user/admin to share their "root" level folder by manipulating the parameter in the JSON body request to the remote API
原文中的代码
Steps to repo: 1. Create a new user account with no permissions/shared files 1. In the admin account enable Nextcloud Talk(speed) 1. Invite the new user to the chat 1. Click on the file symbol in the chat window 1. The file to share dialog window will popup 1. select any folder from the admin …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Nextcloud 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @chevonphillip · 版权归作者与 Nextcloud 所有