CVE-2021-32679

creationtimestamp| type| source ---|---|--- 2021-07-12 16:17:55+00:00| seen| https://t.me/cibsecurity/26058...

CVE-2021-32679

CVE-2021-32679 : In Nextcloud Server, filenames were not escaped by default in controllers using DownloadResponse prior to versions 19.0.13, 20.0.11, and 21.0.3. A user-supplied filename passed unsanitized could cause a downloaded file to have a benign extension while the content is executable, p...