Advisories · Technology
nextcloud security-advisories.
Every CVE that names nextcloud security-advisories among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Nextcloud: Propfind requests for file comments allowed to load comments for other files
- nextcloud security-advisories
- Broken access control
- CVSS 7.1 High
Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views
- nextcloud security-advisories
- SQL injection
- CVSS 5.9 Medium
Nextcloud: Bypass of second factor authentication on DAV endpoints
- nextcloud security-advisories
- Authentication bypass
- CVSS 5.9 Medium
Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay
- nextcloud security-advisories
- Authentication bypass
- CVSS 8.2 High
Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution
- nextcloud security-advisories
- SQL injection
- CVSS 4.3 Medium
Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService
- nextcloud security-advisories
- CWE-1230
- CVSS 5.3 Medium
Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share
- nextcloud security-advisories
- Information disclosure
- CVSS 4.3 Medium
Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint
- nextcloud security-advisories
- Information disclosure
- CVSS 4.6 Medium
Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate
- nextcloud security-advisories
- Broken access control
- CVSS 6.4 Medium
Nextcloud: Hidden Public Link creation when sharing to a Team External Member
- nextcloud security-advisories
- Broken access control
- CVSS 6.3 Medium
Nextcloud: Files Lock app allows users to lock and unlock files of other users
- nextcloud security-advisories
- Authentication bypass
- CVSS 6.5 Medium
Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file access
- nextcloud security-advisories
- Broken access control
- CVSS 8.1 High
Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update
- nextcloud security-advisories
- Broken access control
- CVSS 4.4 Medium
Nextcloud: Limited path traversal via template API if using `{lang}` in config
- nextcloud security-advisories
- Path traversal
- CVSS 3.3 Low
Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass
- nextcloud security-advisories
- Open redirect
- CVSS 3.3 Low
Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations
- nextcloud security-advisories
- Information disclosure
- CVSS 6.5 Medium
Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers
- nextcloud security-advisories
- Broken access control
- CVSS 6.5 Medium
Nextcloud: Missing permission check for from submissions
- nextcloud security-advisories
- Information disclosure
- Broken access control
- CVSS 3.5 Low
Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling
- nextcloud security-advisories
- Broken access control
- CVSS 3.5 Low
Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner
- nextcloud security-advisories
- Broken access control
- CVSS 6.3 Medium
Nextcloud: Valid share tokens allow to access tempory upload files of share owner
- nextcloud security-advisories
- Broken access control
- CVSS 8.1 High
Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC
- nextcloud security-advisories
- Authentication bypass
- CVSS 2.6 Low
Nextcloud: Private circle can be added to another circle via API
- nextcloud security-advisories
- Broken access control
- CVSS 2.6 Low
Nextcloud: Improper Access Control in Collectives
- nextcloud security-advisories
- Broken access control
- CVSS 4.6 Medium
Nextcloud: PIN bypass in PassCodeActivity via back button
- nextcloud security-advisories
- Authentication bypass
- CVSS 4.3 Medium
Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames
- nextcloud security-advisories
- Broken access control
- CVSS 3.1 Low
Nextcloud Twofactor WebAuthn app was updated based on public key
- nextcloud security-advisories
- Broken access control
- CVSS 3.5 Low
Nextcloud talk allows participants to blindly delete poll drafts of other users by ID
- nextcloud security-advisories
- Broken access control
- CVSS 3.5 Low
Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title field
- nextcloud security-advisories
- Cross-site scripting (XSS)
- CVSS 2.4 Low
Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory
- nextcloud security-advisories
- Information disclosure
- CVSS 3.5 Low
Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash bin
- nextcloud security-advisories
- CWE-707
- CVSS 2.7 Low
Nextcloud Approval app allows users to request approval for other users file
- nextcloud security-advisories
- Authentication bypass
- CVSS 3.5 Low
Nextcloud Mail stored HTML injection in subject text
- nextcloud security-advisories
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Nextcloud Deck app allowed user with "Can share" permission to modify permissions of other non-owners
- nextcloud security-advisories
- Broken access control
- CVSS 3.3 Low
Nextcloud Deck app allows to spoof file extensions by using RTLO characters
- nextcloud security-advisories
- CWE-116
- CVSS 4.3 Medium
Nextcloud Tables app allowed users to view columns metadata information of any table
- nextcloud security-advisories
- Broken access control
- CVSS 6.3 Medium
Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users
- nextcloud security-advisories
- Broken access control
- CVSS 4.3 Medium
Nextcloud Tables app share information not limited to relevant users
- nextcloud security-advisories
- Broken access control
- CVSS 5.7 Medium
Nextcloud Calendar attachments of local files are offered to downloaded
- nextcloud security-advisories
- CWE-241
- CVSS 3.3 Low
Nextcloud Calendar app allowed booking appointments without the generated token
- nextcloud security-advisories
- Broken access control
- CVSS 4.8 Medium
Nextcloud Calendar app used predictable proposal participant tokens
- nextcloud security-advisories
- Weak cryptography or TLS
- CVSS 4.3 Medium
Nextcloud Server admin_audit does not log all actions on files in groupfolders
- nextcloud security-advisories
- CWE-778
- CVSS 4.3 Medium
Nextcloud Server users can modify tags on files that do not belong to them
- nextcloud security-advisories
- Broken access control
- CVSS 5.4 Medium
Nextcloud Server vulnerable to XSS in SVG images when opened outside of Nextcloud
- nextcloud security-advisories
- Cross-site scripting (XSS)
- CVSS 4.5 Medium
Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact list
- nextcloud security-advisories
- Information disclosure
- CVSS 6.5 Medium
Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table
- nextcloud security-advisories
- CWE-841
- CVSS 2.6 Low
Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission
- nextcloud security-advisories
- Broken access control
- CVSS 4.3 Medium
Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file
- nextcloud security-advisories
- Denial of service
- CVSS 5.0 Medium
Nextcloud Desktop 3rdparty applications can create share links via socket API
- nextcloud security-advisories
- Broken access control
- CVSS 4.3 Medium
Nextcloud Server's test remote endpoint is not rate limited
- nextcloud security-advisories
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Nextcloud Server doesn't request second factor after session timeout
- nextcloud security-advisories
- Authentication bypass
- CVSS 3.5 Low
Nextcloud Mail app does not respect download permissions in shares
- nextcloud security-advisories
- Broken access control
- CVSS 8.2 High
Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers
- nextcloud security-advisories
- Information disclosure
- CVSS 4.2 Medium
Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty
- nextcloud security-advisories
- Weak cryptography or TLS
- CVSS 3.5 Low
Share information of the Nextcloud Tables app is not limited to affected users
- nextcloud security-advisories
- Broken access control
- CVSS 6.3 Medium
Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables
- nextcloud security-advisories
- Broken access control
- CVSS 3.3 Low
Nextcloud User OIDC has an open redirection when logging in with User OIDC
- nextcloud security-advisories
- Open redirect
- CVSS 2.6 Low
Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares
- nextcloud security-advisories
- Information disclosure
- CVSS 4.1 Medium
Nextcloud Server allows users to copy folder that contain files that are blocked by the files access control
- nextcloud security-advisories
- Broken access control
- CVSS 5.7 Medium
Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews
- nextcloud security-advisories
- CWE-706