Nextcloud Server < 22.2.10.16, 23.x < 23.0.12.11, 24.x <24.0.12.7, 25.x < 25.0.11, 26.x < 26.0.6, 27.x < 27.1.0 Multiple Vulnerabilities (GHSA-8JWV-C8C8-9FR3, GHSA-8F69-F9JG-4X3V)

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"...

CVE-2023-48306

CVE-2023-48306 affects Nextcloud Server and Nextcloud Enterprise Server due to a DNS pin middleware vulnerability that enables DNS rebinding and SSRF. The issue is fixed in Nextcloud Server in versions 25.0.11, 26.0.6, and 27.1.0, and in Nextcloud Enterprise Server in 22.2.10.16, 23.0.12.11, 24.0...