地图 / Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet Library

Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet Library

路径遍历 / 路径遍历 / #3249624

厂商: Nextcloud
严重程度: 低危 · CVSS 6.5
赏金: —
弱点: 路径遍历
研究员: @daroo
披露日期: 2025-10-16
资产: https://github.com/nextcloud/tables
CVE: CVE-2025-58051

该报告还没有中文解读。

时间线

2025-07-13报告提交
2025-10-16公开披露

阅读 HackerOne 原文 ↗作者 @daroo · 版权归作者与 Nextcloud 所有

同类报告

Arbitrary file read via the UploadsRewriter when moving and issueGitLab · 2020-04-27 · $20,000 Arbitrary file read via the bulk imports UploadsPipelineGitLab · 2022-03-21 · $29,000 Misuse of an authentication cookie combined with a path traversal on app.starbucks.com permitted access to restricted dataStarbucks · 2020-06-16 Arbitrary file read during project importGitLab · 2021-05-24 · $16,000 Burp Suite Professional: browser-powered crawl can write attacker-controlled files through file input handlingPortSwigger Web Security · 2026-06-14 · $5,000 Path traversal in filename in LINE Mac clientLY Corporation · 2020-07-31