CVE-2020-8153

HIGH

Groupfolders app 4.0.3 - Info Disclosure

Title source: llm

Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.

Core 3

Core References

Exploit, Third Party Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

CVSS v3 8.1

EPSS 0.0037

EPSS Percentile 58.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE

CWE-284 CWE-732

Status published

Products (2)

fedoraproject/fedora 32

nextcloud/group_folders < 4.0.4

Published May 12, 2020

Tracked Since Feb 18, 2026