CVE-2017-0883

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for.

• CWE-275
• CWE-732

• https://hackerone.com/reports/169680Third Party Advisory
• https://nextcloud.com/security/advisory/?id=nc-sa-2017-001Patch, Vendor Advisory
• https://hackerone.com/reports/169680Third Party Advisory
• https://nextcloud.com/security/advisory/?id=nc-sa-2017-001Patch, Vendor Advisory

Published

Apr 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0877A remote code execution vulnerability in the Android media f…
• CVE-2017-0878A remote code execution vulnerability in the Android media f…
• CVE-2017-0879An information disclosure vulnerability in the Android media…
• CVE-2017-0880A denial of service vulnerability in the Android media frame…
• CVE-2017-0881An error in the implementation of an autosubscribe feature i…
• CVE-2017-0882Multiple versions of GitLab expose sensitive user credential…
• CVE-2017-0884Nextcloud Server before 9.0.55 and 10.0.2 suffers from a cre…4.3
• CVE-2017-0885Nextcloud Server before 9.0.55 and 10.0.2 suffers from a err…4.3
• CVE-2017-0886Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Den…6.5
• CVE-2017-0887Nextcloud Server before 9.0.55 and 10.0.2 suffers from a byp…4.3
• CVE-2017-0888Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Con…4.3
• CVE-2017-0889Paperclip ruby gem version 3.1.4 and later suffers from a Se…