Bug 1188255 – VUL-0: CVE-2021-32734: nextcloud: possible full path disclosure on shared files

Bug 1188255 - (CVE-2021-32734) VUL-0: CVE-2021-32734: nextcloud: possible full path disclosure on shared files

(CVE-2021-32734)
Summary:	VUL-0: CVE-2021-32734: nextcloud: possible full path disclosure on shared files

Status:	RESOLVED FIXED

Classification:	openSUSE
Product:	openSUSE Distribution
Classification:	openSUSE
Component:	Security
Version:	Leap 15.2
Hardware:	Other Other

Priority:	P3 - Medium Severity: Minor (vote)
Target Milestone:	---
Assigned To:	Eric Schirra
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/303777/
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2021-07-13 10:43 UTC by Alexander Bergmann
Modified:	2021-08-18 15:19 UTC (History)
CC List:	0 users

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Alexander Bergmann 2021-07-13 10:43:19 UTC

CVE-2021-32734

Nextcloud Server is a Nextcloud package that handles data storage. In versions
prior to 19.0.13, 20.011, and 21.0.3, the Nextcloud Text application shipped
with Nextcloud Server returned verbatim exception messages to the user. This
could result in a full path disclosure on shared files. The issue was fixed in
versions 19.0.13, 20.0.11, and 21.0.3. As a workaround, one may disable the
Nextcloud Text application in Nextcloud Server app settings.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32734
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32734
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6hf5-c2c4-2526
https://github.com/nextcloud/text/pull/1695
https://hackerone.com/reports/1246721

Comment 1 OBSbugzilla Bot 2021-07-13 13:10:51 UTC

This is an autogenerated message for OBS integration:
This bug (1188255) was mentioned in
https://build.opensuse.org/request/show/906122 15.2+Backports:SLE-12+Backports:SLE-15-SP1+Backports:SLE-15-SP2+Backports:SLE-15-SP3 / nextcloud

Comment 2 Swamp Workflow Management 2021-07-21 01:18:03 UTC

openSUSE-SU-2021:1068-1: An update that fixes 13 vulnerabilities is now available.

Category: security (important)
Bug References: 1181445,1181803,1181804,1188247,1188248,1188249,1188250,1188251,1188252,1188253,1188254,1188255,1188256
CVE References: CVE-2020-8293,CVE-2020-8294,CVE-2020-8295,CVE-2021-32678,CVE-2021-32679,CVE-2021-32680,CVE-2021-32688,CVE-2021-32703,CVE-2021-32705,CVE-2021-32725,CVE-2021-32726,CVE-2021-32734,CVE-2021-32741
JIRA References: 
Sources used:
openSUSE Leap 15.2 (src):    nextcloud-20.0.11-lp152.3.9.1
openSUSE Backports SLE-15-SP3 (src):    nextcloud-20.0.11-bp153.2.3.1
openSUSE Backports SLE-15-SP2 (src):    nextcloud-20.0.11-bp152.2.9.1
openSUSE Backports SLE-15-SP1 (src):    nextcloud-20.0.11-bp151.3.15.1

Comment 3 Swamp Workflow Management 2021-07-21 01:20:29 UTC

openSUSE-SU-2021:1068-1: An update that fixes 13 vulnerabilities is now available.

Category: security (important)
Bug References: 1181445,1181803,1181804,1188247,1188248,1188249,1188250,1188251,1188252,1188253,1188254,1188255,1188256
CVE References: CVE-2020-8293,CVE-2020-8294,CVE-2020-8295,CVE-2021-32678,CVE-2021-32679,CVE-2021-32680,CVE-2021-32688,CVE-2021-32703,CVE-2021-32705,CVE-2021-32725,CVE-2021-32726,CVE-2021-32734,CVE-2021-32741
JIRA References: 
Sources used:
openSUSE Leap 15.2 (src):    nextcloud-20.0.11-lp152.3.9.1
openSUSE Backports SLE-15-SP3 (src):    nextcloud-20.0.11-bp153.2.3.1
openSUSE Backports SLE-15-SP2 (src):    nextcloud-20.0.11-bp152.2.9.1
openSUSE Backports SLE-15-SP1 (src):    nextcloud-20.0.11-bp151.3.15.1
SUSE Package Hub for SUSE Linux Enterprise 12 (src):    nextcloud-20.0.11-28.1

Comment 4 Marcus Meissner 2021-08-18 15:19:05 UTC

done