Test ID:	1.3.6.1.4.1.25623.1.0.107146
Category:	Web application abuses
Title:	Nextcloud Server Multiple Vulnerabilities - Windows
Summary:	Nextcloud Server is prone to multiple vulnerabilities.
Description:	Summary: Nextcloud Server is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - the top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information. - an error in the application logic an authenticated adversary may trigger an endless recursion in the application. - not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. - an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages. - a permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. - a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Vulnerability Impact: Successful exploitation will allow an attacker to edit files in a share, lead to a potential misrepresentation of information, and can cause denial of service conditions. Affected Software/OS: Versions prior to Nextcloud Server 9.0.55 and 10.0.2 are vulnerable Solution: Updates are available. Please see the references or vendor advisory for more information. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-0883 https://hackerone.com/reports/169680 Common Vulnerability Exposure (CVE) ID: CVE-2017-0884 Common Vulnerability Exposure (CVE) ID: CVE-2017-0885 https://hackerone.com/reports/174524 Common Vulnerability Exposure (CVE) ID: CVE-2017-0886 Common Vulnerability Exposure (CVE) ID: CVE-2017-0887 https://hackerone.com/reports/173622 Common Vulnerability Exposure (CVE) ID: CVE-2017-0888 BugTraq ID: 97491 http://www.securityfocus.com/bid/97491 https://hackerone.com/reports/179073
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.