PT-2021-22475 · Nextcloud · Nextcloud Officeonline

Lukas Reschke · Published 2021-10-25 · Updated 2021-10-29 · CVE-2021-39224

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud OfficeOnline versions prior to 1.1.1

Description The Nextcloud OfficeOnline application returned verbatim exception messages to the user, which could result in a full path disclosure on shared files. For example, an attacker could see that the file shared.txt is located within /files/$username/Myfolder/Mysubfolder/shared.txt.

Recommendations For versions prior to 1.1.1, upgrade the OfficeOnline application to 1.1.1. As a temporary workaround, consider disabling the OfficeOnline application in the app settings until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-39224

GHSA-56WM-R6JM-3V9H

Affected Products

Nextcloud Officeonline

References · 6

• https://github.com/nextcloud/officeonline/pull/204 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-39224 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39224 · Vendor Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-56wm-r6jm-3v9h · Note
• https://t.me/cibsecurity/31181 · Telegram Post
• https://t.me/cvenotify/22392 · Telegram Post