CVE-2017-0884 - CVE House
Back to Database
Status published Medium CVE-2017-0884

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation...

Vulnerability Description

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Note that this only affects folders and files that the adversary has at least read-only permissions for.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-0884

Credits & Attribution

No credits recorded in the NVD database.

References

More from Nextcloud

View All →
CVE-2025-59788
Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory...
Medium 6.4
CVE-2019-5455
Bypassing lock protection exists in Nextcloud Android app 3.6.0 when...
Medium 6.8
CVE-2019-5453
Bypass lock protection in the Nextcloud Android app prior to...
Medium 6.1
CVE-2018-3764
In Nextcloud Contacts before 2.1.2, a missing sanitization of search...
Medium 4.8
CVE-2018-3763
In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization...
Medium 4.8

Affected Vendor

Affected Software

Nextcloud Server
Vulnerable Versions:
All versions before 9.0.55 and 10.0.2

Timeline

Official Publish: April 5th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-275

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.