Latest nextcloud nextcloud server Vulnerabilities

● CVE-2024-22403
OAuth2 authorization codes are valid indefinetly in Nextcloud server
Nextcloud Nextcloud Server<28.0.0
● CVE-2023-49792
Bruteforce protection can be bypassed with misconfigured proxy
Nextcloud Nextcloud Server>=23.0.0<23.0.12.13
Nextcloud Nextcloud Server>=24.0.0<24.0.12.9
Nextcloud Nextcloud Server>=25.0.0<25.0.13.4
Nextcloud Nextcloud Server>=26.0.0<26.0.9
Nextcloud Nextcloud Server>=26.0.0<26.0.9
Nextcloud Nextcloud Server>=27.0.0<27.1.4
and 1 more
● CVE-2023-49791
Workflows do not require password confirmation on API level
Nextcloud Nextcloud Server>=23.0.0<23.0.12.13
Nextcloud Nextcloud Server>=24.0.0<24.0.12.9
Nextcloud Nextcloud Server>=25.0.0<25.0.13.4
Nextcloud Nextcloud Server>=26.0.0<26.0.9
Nextcloud Nextcloud Server>=26.0.0<26.0.9
Nextcloud Nextcloud Server>=27.0.0<27.1.4
and 1 more
● CVE-2023-48306
Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF
Nextcloud Nextcloud Server>=22.0.0<22.2.10.16
Nextcloud Nextcloud Server>=23.0.0<23.0.12.11
Nextcloud Nextcloud Server>=24.0.0<24.0.12.7
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=26.0.0<26.0.6
and 3 more
● CVE-2023-48305
Nextcloud Server user_ldap app logs user passwords in the log file on level debug
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=26.0.0<26.0.6
Nextcloud Nextcloud Server>=26.0.0<26.0.6
Nextcloud Nextcloud Server>=27.0.0<27.1.0
Nextcloud Nextcloud Server>=27.0.0<27.1.0
● CVE-2023-48304
Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user
Nextcloud Nextcloud Server>=22.0.0<=22.2.10.16
Nextcloud Nextcloud Server>=23.0.0<23.0.12.11
Nextcloud Nextcloud Server>=24.0.0<24.0.12.7
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=26.0.0<26.0.6
and 3 more
● CVE-2023-48303
Nextcloud Server admins can change authentication details of user configured external storage
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=26.0.0<26.0.6
Nextcloud Nextcloud Server>=26.0.0<26.0.6
Nextcloud Nextcloud Server>=27.0.0<27.1.0
Nextcloud Nextcloud Server>=27.0.0<27.1.0
● CVE-2023-48301
Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name
Nextcloud Nextcloud Server>=25.0.0<=25.0.13
Nextcloud Nextcloud Server>=25.0.0<25.0.13
Nextcloud Nextcloud Server>=26.0.0<=26.0.8
Nextcloud Nextcloud Server>=26.0.0<26.0.8
Nextcloud Nextcloud Server>=27.0.0<=27.1.3
Nextcloud Nextcloud Server>=27.0.0<27.1.3
● CVE-2023-48239
Nextcloud Server users can make external storage mount points inaccessible for other users
Nextcloud Nextcloud Server>=20.0.0<20.0.14.16
Nextcloud Nextcloud Server>=21.0.0<21.0.9.13
Nextcloud Nextcloud Server>=22.0.0<22.2.10.15
Nextcloud Nextcloud Server>=23.0.0<23.0.12.12
Nextcloud Nextcloud Server>=24.0.0<24.0.12.8
Nextcloud Nextcloud Server>=25.0.0<25.0.13
and 5 more
● CVE-2023-45148
Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than ...
Nextcloud Nextcloud Server>=22.0.0<22.2.10.16
Nextcloud Nextcloud Server>=23.0.0<23.0.12.11
Nextcloud Nextcloud Server>=24.0.0<24.0.12.7
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=25.0.0<25.0.11
Nextcloud Nextcloud Server>=26.0.0<26.0.6
and 3 more
● CVE-2023-45151
Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially ele...
Nextcloud Nextcloud Server>=25.0.0<25.0.8
Nextcloud Nextcloud Server>=25.0.0<25.0.8
Nextcloud Nextcloud Server>=26.0.0<26.0.3
Nextcloud Nextcloud Server>=26.0.0<26.0.3
Nextcloud Nextcloud Server=27.0.0
Nextcloud Nextcloud Server=27.0.0
● CVE-2023-39960
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and 26.04; as well as Nextcloud Enterprise Server start...
Nextcloud Nextcloud Server>=22.0.0<22.2.10.14
Nextcloud Nextcloud Server>=23.0.0<23.0.12.9
Nextcloud Nextcloud Server>=24.0.0<24.0.12.5
Nextcloud Nextcloud Server>=25.0.0<25.0.9
Nextcloud Nextcloud Server>=25.0.0<25.0.9
Nextcloud Nextcloud Server>=26.0.0<26.0.4
and 1 more
● CVE-2023-39959
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated users could send a DAV...
Nextcloud Nextcloud Server>=25.0.0<25.0.9
Nextcloud Nextcloud Server>=25.0.0<25.0.9
Nextcloud Nextcloud Server>=26.0.0<26.0.4
Nextcloud Nextcloud Server>=26.0.0<26.0.4
Nextcloud Nextcloud Server=27.0.0
Nextcloud Nextcloud Server=27.0.0
● CVE-2023-39962
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12....
Nextcloud Nextcloud Server>=19.0.0<19.0.13.10
Nextcloud Nextcloud Server>=20.0.0<20.0.14.15
Nextcloud Nextcloud Server>=21.0.0<21.0.9.13
Nextcloud Nextcloud Server>=22.0.0<22.2.10.14
Nextcloud Nextcloud Server>=23.0.0<23.0.12.9
Nextcloud Nextcloud Server>=24.0.0<24.0.12.5
and 6 more
● CVE-2023-39961
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with images or an image ...
Nextcloud Nextcloud Server>=25.0.0<25.0.9
Nextcloud Nextcloud Server>=25.0.0<25.0.9
Nextcloud Nextcloud Server>=26.0.0<26.0.4
Nextcloud Nextcloud Server>=26.0.0<26.0.4
Nextcloud Nextcloud Server=27.0.0
Nextcloud Nextcloud Server=27.0.0
● CVE-2023-39963
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 2...
Nextcloud Nextcloud Server>=20.0.0<20.0.14.15
Nextcloud Nextcloud Server>=21.0.0<21.0.9.13
Nextcloud Nextcloud Server>=22.0.0<22.2.10.14
Nextcloud Nextcloud Server>=23.0.0<23.0.12.9
Nextcloud Nextcloud Server>=24.0.0<24.0.12.5
Nextcloud Nextcloud Server>=25.0.0<25.0.9
and 5 more
● CVE-2023-39958
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, miss...
Nextcloud Nextcloud Server>=22.0.0<22.2.10.14
Nextcloud Nextcloud Server>=23.0.0<23.0.12.9
Nextcloud Nextcloud Server>=24.0.0<24.0.12.5
Nextcloud Nextcloud Server>=25.0.0<25.0.9
Nextcloud Nextcloud Server>=25.0.0<25.0.9
Nextcloud Nextcloud Server>=26.0.0<26.0.4
and 3 more
● CVE-2023-39952
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1, a us...
Nextcloud Nextcloud Server>=22.0.0<22.2.10.13
Nextcloud Nextcloud Server>=23.0.0<23.0.12.8
Nextcloud Nextcloud Server>=24.0.0<24.0.12.4
Nextcloud Nextcloud Server>=25.0.0<25.0.8
Nextcloud Nextcloud Server>=25.0.0<25.0.8
Nextcloud Nextcloud Server>=26.0.0<26.0.3
and 3 more
● CVE-2023-35928
Nextcloud Nextcloud Server>=19.0.0<19.0.13.9
Nextcloud Nextcloud Server>=20.0.0<20.0.14.14
Nextcloud Nextcloud Server>=21.0.0<21.0.9.12
Nextcloud Nextcloud Server>=22.0.0<22.2.10.12
Nextcloud Nextcloud Server>=23.0.0<23.0.12.7
Nextcloud Nextcloud Server>=24.0.0<24.0.12.2
and 4 more
● CVE-2023-35171
NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supp...
Nextcloud Nextcloud Server>=26.0.0<26.0.2
Nextcloud Nextcloud Server>=26.0.0<26.0.2
● CVE-2023-35927
NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and N...
Nextcloud Nextcloud Server>=16.0.0<19.0.13.9
Nextcloud Nextcloud Server>=20.0.0<20.0.14.14
Nextcloud Nextcloud Server>=21.0.0<21.0.9.12
Nextcloud Nextcloud Server>=22.0.0<22.2.10.12
Nextcloud Nextcloud Server>=23.0.0<23.0.12.7
Nextcloud Nextcloud Server>=24.0.0<24.0.12.2
and 4 more
● CVE-2023-35172
NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and N...
Nextcloud Nextcloud Server>=21.0.0<21.0.9.12
Nextcloud Nextcloud Server>=22.0.0<22.2.10.12
Nextcloud Nextcloud Server>=23.0.0<23.0.12.7
Nextcloud Nextcloud Server>=24.0.0<24.0.12.2
Nextcloud Nextcloud Server>=25.0.0<25.0.7
Nextcloud Nextcloud Server>=25.0.0<25.0.7
and 2 more
● CVE-2023-32320
Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the amount of faulty reques...
Nextcloud Nextcloud Server>=21.0.0<21.0.9.12
Nextcloud Nextcloud Server>=22.0.0<22.2.10.12
Nextcloud Nextcloud Server>=23.0.0<23.0.12.7
Nextcloud Nextcloud Server>=24.0.0<24.0.12.2
Nextcloud Nextcloud Server>=25.0.0<25.0.7
Nextcloud Nextcloud Server>=25.0.0<25.0.7
and 2 more
● CVE-2023-32319
Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header allowed to brute-force user credentials when the prov...
Nextcloud Nextcloud Server>=25.0.0<25.0.5
Nextcloud Nextcloud Server>=24.0.0<24.0.11
● CVE-2023-32318
Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session on logout if cookies ...
Nextcloud Nextcloud Server>=25.0.2<25.0.6
Nextcloud Nextcloud Server>=25.0.2<25.0.6
Nextcloud Nextcloud Server=26.0.0
Nextcloud Nextcloud Server=26.0.0
● CVE-2023-30539
Nextcloud Nextcloud Files Automated Tagging>=1.14.0<1.14.2
Nextcloud Nextcloud Files Automated Tagging>=1.15.0<1.15.3
Nextcloud Nextcloud Files Automated Tagging=1.11.0
Nextcloud Nextcloud Files Automated Tagging=1.12.0
Nextcloud Nextcloud Files Automated Tagging=1.13.0
Nextcloud Nextcloud Files Automated Tagging=1.16.0
and 7 more
● CVE-2023-28834
Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterprise Server 23.0.0 until 23.0.11, 24.0.0 until 24.0.6...
Nextcloud Nextcloud Server>=23.0.0<23.0.14
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=25.0.0<25.0.4
Nextcloud Nextcloud Server>=25.0.0<25.0.4
● CVE-2023-28844
Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still download an older version and use that for uncontrolled di...
Nextcloud Nextcloud Server>=24.0.4<24.0.10
Nextcloud Nextcloud Server>=25.0.0<25.0.4
● CVE-2023-28835
Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number generator, so when th...
Nextcloud Nextcloud Server>=23.0.0<23.0.14
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=25.0.0<25.0.4
Nextcloud Nextcloud Server>=25.0.0<25.0.4
● CVE-2023-28643
Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memory cache is configured, the second share will repl...
Nextcloud Nextcloud Server>=24.0.0<24.0.9
Nextcloud Nextcloud Server>=24.0.0<24.0.9
Nextcloud Nextcloud Server>=25.0.0<25.0.3
Nextcloud Nextcloud Server>=25.0.0<25.0.3
● CVE-2023-28833
Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was not restricted and c...
Nextcloud Nextcloud Server>=23.0.0<23.0.14
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=25.0.0<25.0.4
Nextcloud Nextcloud Server>=25.0.0<25.0.4
● CVE-2023-26482
Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrato...
Nextcloud Nextcloud Server>=18.0.0<20.0.14.12
Nextcloud Nextcloud Server>=21.0.0<21.0.9.10
Nextcloud Nextcloud Server>=22.0.0<22.2.10.10
Nextcloud Nextcloud Server>=23.0.0<23.0.12.5
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=24.0.0<24.0.10
and 2 more
● CVE-2023-25817
Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user could escalate their permissions to delete files they were not supposed to deletable...
Nextcloud Nextcloud Server>=24.0.0<24.0.9
● CVE-2023-25818
Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to reset the password of another user and then brute force the 62^21 combinations for...
Nextcloud Nextcloud Server>=21.0.0<21.0.9.10
Nextcloud Nextcloud Server>=22.0.0<22.2.10.10
Nextcloud Nextcloud Server>=23.0.0<23.0.12.5
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=25.0.0<25.0.4
and 1 more
● CVE-2023-25820
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server software. In Nextcloud Ser...
Nextcloud Nextcloud Server>=21.0.0<21.0.9
Nextcloud Nextcloud Server>=22.2.0<22.2.10.10
Nextcloud Nextcloud Server>=23.0.0<23.0.12.5
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=24.0.0<24.0.10
Nextcloud Nextcloud Server>=25.0.0<25.0.4
and 1 more
● CVE-2023-25816
Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A user can configure a very long password, consuming m...
Nextcloud Nextcloud Server>=25.0.0<25.0.3
Nextcloud Nextcloud Server>=25.0.0<25.0.3
● CVE-2023-25821
Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improper Access Control. Secure view for internal shares ...
Nextcloud Nextcloud Server>=24.0.4<24.0.7
Nextcloud Nextcloud Server>=24.0.4<24.0.7
Nextcloud Nextcloud Server=25.0.0
Nextcloud Nextcloud Server=25.0.0
● CVE-2023-25579
Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and normalizing the string in the wrong order. The function...
Nextcloud Nextcloud Server<23.0.12
Nextcloud Nextcloud Server>=20.0.0<20.0.14
Nextcloud Nextcloud Server>=21.0.0<21.0.9
Nextcloud Nextcloud Server>=22.2.0<22.2.10
Nextcloud Nextcloud Server>=23.0.0<23.0.12
Nextcloud Nextcloud Server>=24.0.0<24.0.8
and 3 more
● CVE-2023-25162
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.12 and Nextcloud Enterprise server prior to 24.0.8 and 23.0.1...
Nextcloud Nextcloud Server<23.0.12
Nextcloud Nextcloud Server>=24.0.0<24.0.8
● CVE-2023-25161
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 25.0.1 24.0.8, and 23.0.12 missing r...
Nextcloud Nextcloud Server<23.0.12
Nextcloud Nextcloud Server>=24.0.0<24.0.8
Nextcloud Nextcloud Server=25.0.0
● CVE-2023-25159
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform. Nextcloud Server 24.0.x pri...
Nextcloud Nextcloud Server>=24.0.4<=24.0.8
Nextcloud Nextcloud Server=24.0.2
Nextcloud Nextcloud Server=25.0.0
Nextcloud Richdocuments>=6.0.0<6.3.1
Nextcloud Richdocuments=7.0.0
● CVE-2022-41970
Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through preview images. Images could be downloaded and prev...
Nextcloud Nextcloud Server>=24.0.0<24.0.7
Nextcloud Nextcloud Server>=24.0.0<24.0.7
Nextcloud Nextcloud Server=25.0.0
Nextcloud Nextcloud Server=25.0.0
● CVE-2022-39346
Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing da...
Nextcloud Nextcloud Enterprise Server<22.2.10
Nextcloud Nextcloud Enterprise Server>=23.0.0<23.0.7
Nextcloud Nextcloud Enterprise Server>=24.0.0<24.0.3
Nextcloud Nextcloud Server<22.2.10
Nextcloud Nextcloud Server>=23.0.0<23.0.7
Nextcloud Nextcloud Server>=24.0.0<24.0.3
and 3 more
● CVE-2022-39364
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server prior to versio...
Nextcloud Nextcloud Enterprise Server<22.2.10.5
Nextcloud Nextcloud Enterprise Server>=23.0.0<23.0.9
Nextcloud Nextcloud Enterprise Server>=24.0.0<24.0.5
Nextcloud Nextcloud Server<23.0.9
Nextcloud Nextcloud Server>=24.0.0<24.0.5
● CVE-2022-39330
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions...
Nextcloud Nextcloud Enterprise Server<22.2.10
Nextcloud Nextcloud Enterprise Server>=23.0.0<23.0.10
Nextcloud Nextcloud Enterprise Server>=24.0.0<24.0.6
Nextcloud Nextcloud Server<23.0.10
Nextcloud Nextcloud Server>=24.0.0<24.0.6
● CVE-2022-39329
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to ...
Nextcloud Nextcloud Enterprise Server<23.0.9
Nextcloud Nextcloud Enterprise Server>=24.0.0<24.0.5
Nextcloud Nextcloud Server<23.0.9
Nextcloud Nextcloud Server>=24.0.0<24.0.5
● CVE-2022-39211
Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcl...
Nextcloud Nextcloud Enterprise Server<22.2.10.4
Nextcloud Nextcloud Enterprise Server>=23.0.0<23.0.8
Nextcloud Nextcloud Enterprise Server>=24.0.0<24.0.4
Nextcloud Nextcloud Server<23.0.8
Nextcloud Nextcloud Server>=24.0.0<24.0.4
● CVE-2022-36074
Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. Thi...
Nextcloud Nextcloud Enterprise Server<22.2.11
Nextcloud Nextcloud Enterprise Server>=23.0.0<23.0.7
Nextcloud Nextcloud Enterprise Server>=24.0.0<24.0.3
Nextcloud Nextcloud Server<23.0.7
Nextcloud Nextcloud Server>=24.0.0<24.0.3
● CVE-2022-31118
Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find if federated sharing is being used and potentially try to brute force access toke...
Nextcloud Nextcloud Server<22.2.9
Nextcloud Nextcloud Server>=23.0.0<23.0.6
Nextcloud Nextcloud Server>=24.0.0<24.0.2
● CVE-2022-31120
Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions which has been incompletely populated. In affected versions federated share events ...
Nextcloud Nextcloud Server<22.2.7
Nextcloud Nextcloud Server>=23.0.0<23.0.4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203