description: A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves.
problem types: Improper Privilege Management (CWE-269)
affected:
{
product: Nextcloud Server
vendor: n/a
versions:
status: affected, version: Fixed in 19.0.1
}