← 返回地图
破甲
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
admin_audit does not log actions on files in a group folder
信息泄露
/
Insufficient Logging
/ #2890071
厂商
Nextcloud
严重程度
低危
· CVSS 4.3
赏金
—
弱点
Insufficient Logging
研究员
@klipz
披露日期
2025-12-05
资产
nextcloud/server
CVE
CVE-2025-66552
该报告还没有中文解读。
时间线
2024-12-09
报告提交
2025-12-05
公开披露
阅读 HackerOne 原文 ↗
作者 @klipz · 版权归作者与 Nextcloud 所有
同类报告
Non-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration
AWS VDP · 2025-03-24
Non-Production API Endpoints for the Amazon S3 Tables Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration
AWS VDP · 2026-07-02
(Part 2) Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration
AWS VDP · 2025-04-08
Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration
AWS VDP · 2025-02-26
Non-Production API Endpoints for the DocumentDB Elastic Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration
AWS VDP · 2025-03-11
Non-Production API Endpoint for the ElastiCache Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration
AWS VDP · 2025-04-25