CVE-2017-0885

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages.

• CWE-209
• CWE-200

• https://hackerone.com/reports/174524Third Party Advisory
• https://nextcloud.com/security/advisory/?id=nc-sa-2017-003Broken Link, Patch, Vendor Advisory
• https://hackerone.com/reports/174524Third Party Advisory
• https://nextcloud.com/security/advisory/?id=nc-sa-2017-003Broken Link, Patch, Vendor Advisory

Published

Apr 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0879An information disclosure vulnerability in the Android media…
• CVE-2017-0880A denial of service vulnerability in the Android media frame…
• CVE-2017-0881An error in the implementation of an autosubscribe feature i…
• CVE-2017-0882Multiple versions of GitLab expose sensitive user credential…
• CVE-2017-0883Nextcloud Server before 9.0.55 and 10.0.2 suffers from a per…
• CVE-2017-0884Nextcloud Server before 9.0.55 and 10.0.2 suffers from a cre…4.3
• CVE-2017-0886Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Den…6.5
• CVE-2017-0887Nextcloud Server before 9.0.55 and 10.0.2 suffers from a byp…4.3
• CVE-2017-0888Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Con…4.3
• CVE-2017-0889Paperclip ruby gem version 3.1.4 and later suffers from a Se…
• CVE-2017-0890Nextcloud Server before 11.0.3 is vulnerable to an inadequat…5.4
• CVE-2017-0891Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vul…