CVE-2020-8153 - Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name

HIGH

Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name

Published May 12, 2020

8.1

HIGH

CVSS 3.1

EPSS 1.86%

Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Nextcloud Groupfolders	unknown	Affected 4.0.4

No remediation recorded yet.

Weaknesses (2)

CWE-284

CWE-732

Incorrect Permission Assignment

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29046		Advisory
https://hackerone.com/reports/642515		x_refsource_MISCExploitThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/		vendor-advisoryx_refsource_FEDORA
https://nextcloud.com/security/advisory/?id=NC-SA-2020-017		x_refsource_MISCVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hackerone

Published May 12, 2020

Updated Aug 4, 2024

Reserved Jan 28, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner hackerone

Published May 12, 2020

Updated Aug 4, 2024

GitHub

No data