Nextcloud: Vulnerable moment-timezone version shipped

An information exposure vulnerability was found in the moment-timezone package used by Nextcloud server. Attackers could sniff network traffic during data transmission, making exploitation easier. The vulnerability was patched in version 0.5.35 by changing the FTP endpoint with an HTTPS endpoint...