Nextcloud: nextcloud.com: Content Injection Custom 404 Error

Hello Team , Request: if u think the reported issues have acceptable risk and u r not going to make changes then kindly request to mark as Informative . Description : This report is about how an attacker is able to spoof the content of 404 page and can add thr own Text in way that the Current...

Nextcloud: Possible RCE

Hello, I just quickly took a glance, I am not entirely sure or didn't get a chance to test it but it seems there are some serious bugs. In /apps/userldap/ajax/wizard.php: php 36: $action = string$POST'action'; and it is called in multiple places. including line 83 & 99. one being $action$loginNam...

CVE-2023-41087

...

CVE-2023-45211

...

CVE-2023-41087

This CVE ID has been rejected as unused by its CNA and does not represent an active vulnerability entry.

CVE-2023-45211

This CVE ID has been rejected by its Numbering Authority as unused; it does not represent an active vulnerability.