Description
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2012-1751 Vulnerability (CVE-2012-1751)
Drupal Core 7.x SQL Injection (7.0 - 7.31)
WordPress Plugin User Meta Manager Multiple Vulnerabilities (3.4.6)
Oracle Application Server Other Vulnerability (CVE-2004-2134)
WordPress Plugin ThinkIT WP Contact Form Multiple Vulnerabilities (0.2)