Nextcloud Fixes Vulnerability in Read-Only Shares
A security flaw in Nextcloud allowed recipients of read-only shares to modify and delete files.
A vulnerability in Nextcloud has been addressed that permitted users with read-only share links to alter and remove files, despite the intended restrictions set by the file owner. This issue primarily affected shares originating from external storage and team folders within the platform.
The vulnerability arose when recipients of these links were able to bypass the read-only limitations, gaining unintended modification and deletion capabilities. Nextcloud GmbH has released a patch to rectify this security lapse and reinforce the integrity of shared files.
The company emphasizes its commitment to responsible data handling and encourages users to review the privacy policy for detailed information regarding data processing practices and user rights, including the ability to withdraw consent for data usage.