CVE-2020-8153: Fedoraproject Fedora

High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days.

Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.

Affected products

• Fedoraproject Fedora: version 32 only
• Nextcloud Group Folders: before 4.0.4 (fixed in 4.0.4)

Published 2020-05-12. Last modified 2026-06-17.