PkgSeer

Vulnerability GO-2026-6287

Unknown

1 month ago

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve

>=0.0.0

Summary

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve

Details

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve

References

ADVISORY — github.com

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses

<4.0.0-20260715072853-1c5cad6dec7e GHSA-jvh5-97xg-v99f

Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

<4.0.0-20260715070110-bce08f88e9d8 GHSA-w89x-c962-c44g

Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

<4.0.0-20260715025621-7329602751c0 GHSA-xj3h-wwxq-gfcj

Cloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root in github.com/cloudreve/Cloudreve

v3.0.0-20250225100611-da4e44b77af4 GO-2026-6298

Cloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root in github.com/cloudreve/Cloudreve

v3.0.0-20250225100611-da4e44b77af4 GO-2026-6298

View all vulnerabilities for these packages

Impacted packages

Timeline

Published

1 month ago

Last Modified

7 hours ago