github.com/cloudreve/Cloudreve/v4 vulnerabilities (Go)
16 vulnerabilities.
-
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope 3.8 Low -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service 7.1 High -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses 6.5 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve before 4.16.1 Path Traversal via Remote Download 2.3 Low -
github.com/cloudreve/Cloudreve/v4Go Cloudreve before 4.16.1 Authentication Bypass via Cached Context Hint 6.9 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve before 4.17.0 SSRF via Admin.Read OAuth scope 5.3 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored 6.3 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials 7.1 High -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients 4.3 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Server crash through image decompression/pixel bomb in thumbnail & avatar decoding (DoS) 6.5 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Inactive/banned account emails leaked via GET /api/v4/user/search because SearchActive() omits the active-status predicate 4.3 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account 4.3 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim 7.6 High -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Path Traversal / Broken Access Control in Cloudreve WebDAV (`/dav`) — scoped DAV credential escapes its configured account root 7.1 High -
github.com/cloudreve/Cloudreve/v4Go Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses 6.5 Medium -
github.com/cloudreve/Cloudreve/v4Go Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding) 8.1 High