Nextcloud: Public link share of a folder inside a Team folder ignores permission (github.com) 4 points by alternatetwo 3mo ago ↗ HN
[–] alternatetwo 3mo ago ↗ Full title:Public link share of a folder inside a Team folder (groupfolder) ignores read-only permission anonymous delete/rename/move/upload possibleNextcloud groupfolders was updated last week - and now anybody can upload and delete files in any public link to a groupfolder you have shared!Either revoke all your sharelinks, or apply the fixed lines yourself to the php files ...
1 comment
[ 4.2 ms ] story [ 61.8 ms ] threadPublic link share of a folder inside a Team folder (groupfolder) ignores read-only permission anonymous delete/rename/move/upload possible
Nextcloud groupfolders was updated last week - and now anybody can upload and delete files in any public link to a groupfolder you have shared!
Either revoke all your sharelinks, or apply the fixed lines yourself to the php files ...