Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:cloudreve:cloudreve:*:*:*:*:*:*:*:*

1 brief RSS
medium advisory

Cloudreve Storage Quota Bypass via TOCTOU Race Condition

Cloudreve v4 contains a Time-of-Check to Time-of-Use (TOCTOU) vulnerability that allows authenticated users to bypass storage quotas and exhaust host disk space by triggering concurrent, non-atomic upload session reservations.

Cloudreve
1t 1c