CVE-2017-0884

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Note that this only affects folders and files that the adversary has at least read-only permissions for.

• CWE-275
• CWE-732

• https://hackerone.com/reports/169680Third Party Advisory
• https://nextcloud.com/security/advisory/?id=nc-sa-2017-002Broken Link, Patch, Vendor Advisory
• https://hackerone.com/reports/169680Third Party Advisory
• https://nextcloud.com/security/advisory/?id=nc-sa-2017-002Broken Link, Patch, Vendor Advisory

Published

Apr 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0878A remote code execution vulnerability in the Android media f…
• CVE-2017-0879An information disclosure vulnerability in the Android media…
• CVE-2017-0880A denial of service vulnerability in the Android media frame…
• CVE-2017-0881An error in the implementation of an autosubscribe feature i…
• CVE-2017-0882Multiple versions of GitLab expose sensitive user credential…
• CVE-2017-0883Nextcloud Server before 9.0.55 and 10.0.2 suffers from a per…
• CVE-2017-0885Nextcloud Server before 9.0.55 and 10.0.2 suffers from a err…4.3
• CVE-2017-0886Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Den…6.5
• CVE-2017-0887Nextcloud Server before 9.0.55 and 10.0.2 suffers from a byp…4.3
• CVE-2017-0888Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Con…4.3
• CVE-2017-0889Paperclip ruby gem version 3.1.4 and later suffers from a Se…
• CVE-2017-0890Nextcloud Server before 11.0.3 is vulnerable to an inadequat…5.4