Nextcloud

Nextcloud Server

179 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.06%
  • Veröffentlicht 26.05.2023 18:15:13
  • Zuletzt bearbeitet 21.11.2024 08:03:06

Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session on logout if cookies were not cleared manually. After successfully auth...

Exploit
  • EPSS 0.54%
  • Veröffentlicht 25.04.2023 17:15:08
  • Zuletzt bearbeitet 21.11.2024 07:56:08

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 and 25.0.0 prior to 25.0.5; as well as Nextcloud Server Enterprise 23.0.0 prior to 23.0.12.6, 24.0.0 prior to...

  • EPSS 0.3%
  • Veröffentlicht 17.04.2023 22:15:10
  • Zuletzt bearbeitet 21.11.2024 08:00:22

Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to limit access of others or being able to grant them access when there are system tag based files access control or files retention r...

Exploit
  • EPSS 0.79%
  • Veröffentlicht 03.04.2023 17:15:06
  • Zuletzt bearbeitet 21.11.2024 07:56:07

Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterprise Server 23.0.0 until 23.0.11, 24.0.0 until 24.0.6, and 25.0.0 until 25.0.4, have an information dis...

  • EPSS 0.28%
  • Veröffentlicht 31.03.2023 23:15:07
  • Zuletzt bearbeitet 21.11.2024 07:56:08

Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still download an older version and use that for uncontrolled distribution. This issue has been addressed in versi...

  • EPSS 0.74%
  • Veröffentlicht 30.03.2023 19:15:07
  • Zuletzt bearbeitet 21.11.2024 07:56:07

Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number generator, so when the sharer did not change it the password could be g...

Warnung
  • EPSS 63.96%
  • Veröffentlicht 30.03.2023 19:15:06
  • Zuletzt bearbeitet 21.11.2024 07:51:36

Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invok...

Exploit
  • EPSS 0.56%
  • Veröffentlicht 30.03.2023 19:15:06
  • Zuletzt bearbeitet 21.11.2024 07:55:43

Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memory cache is configured, the second share will replace the first one instead of being renamed to `{na...

  • EPSS 0.61%
  • Veröffentlicht 30.03.2023 19:15:06
  • Zuletzt bearbeitet 21.11.2024 07:55:43

Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact server performances and/or can lead to a denial of service. This issue has been addressed and it is...

  • EPSS 0.17%
  • Veröffentlicht 30.03.2023 19:15:06
  • Zuletzt bearbeitet 21.11.2024 07:56:07

Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was not restricted and could overwrite files in the appdata directory. Adm...