Nextcloud · Report #146067
Read-only share recipient can restore old versions of file
Validstatus
$300bounty
7upvotes
19 Jul 2016disclosed
Summary
The restore capability of Nextcloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions.
A detailed advisory can be found at https://nextcloud.com/security/advisory/?id=nc-sa-2016-005.
Thanks a lot, @bugdiscloseguy for pointing out this vulnerability!
On request of the reporter this report has been only disclosed limitedly.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.