CVE-2021-41178: File Traversal affecting SVG files on Nextcloud Server
First published: Mon Oct 25 2021(Updated: )
Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, a file traversal vulnerability makes an attacker able to download arbitrary SVG images from the host system, including user provided files. This could also be leveraged into a XSS/phishing attack, an attacker could upload a malicious SVG file that mimics the Nextcloud login form and send a specially crafted link to victims. The XSS risk here is mitigated due to the fact that Nextcloud employs a strict Content-Security-Policy disallowing execution of arbitrary JavaScript. It is recommended that the Nextcloud Server be upgraded to 20.0.13, 21.0.5 or 22.2.0. There are no known workarounds aside from upgrading.
Credit: security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nextcloud Server | >=20.0.3<20.0.13 | |
| Nextcloud Server | >=21.0.1<21.0.5 | |
| Nextcloud Server | >=22.1.1<22.2.0 | |
| >=20.0.3<20.0.13 | ||
| >=21.0.1<21.0.5 | ||
| >=22.1.1<22.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-41178?
CVE-2021-41178 is a file traversal vulnerability in Nextcloud versions 20.0.3 to 20.0.13, 21.0.1 to 21.0.5, and 22.1.1 to 22.2.0 that allows an attacker to download arbitrary SVG images from the host system.
How can an attacker exploit CVE-2021-41178?
An attacker can exploit CVE-2021-41178 by leveraging the file traversal vulnerability to download arbitrary SVG images, which could also be used for XSS/phishing attacks.
What is the severity of CVE-2021-41178?
CVE-2021-41178 has a severity score of 6.5 (high).
What software versions are affected by CVE-2021-41178?
Nextcloud versions 20.0.3 to 20.0.13, 21.0.1 to 21.0.5, and 22.1.1 to 22.2.0 are affected by CVE-2021-41178.
How can I fix CVE-2021-41178?
To fix CVE-2021-41178, upgrade to Nextcloud versions 20.0.14, 21.0.6, or 22.2.1 or later.
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/nextcloud
- canonical/nextcloud server
- version/nextcloud server/20.0.3
- version/nextcloud server/21.0.1
- version/nextcloud server/22.1.1