title: nextcloud package security issues with /srv/www/htdocs
description: The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.
problem types: Using the untrusted hierarchy under /srv/wwwroot/htdocs during update as root user could be used to overwrite root files.
affected:
{
product: nextcloud
vendor: SUSE
versions:
lessThan: 11.0.3-3.1, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.0
]