CVE-2021-22913

Nextcloud Deck prior to 1.2.7 and 1.4.1 is affected by an information disclosure vulnerability where searches for sharees are sent to the lookup server by default instead of the local Nextcloud server, unless a global search is explicitly chosen. The underlying issue is that the search requests a...

CVE-2021-22912

Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a global search has been explicitly chosen by the user...

CVE-2021-22913

Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user...

CVE-2021-22913

Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user...

CVE-2021-22912

Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a global search has been explicitly chosen by the user...

CVE-2021-22912

The CVE-2021-22912 issue affects Nextcloud iOS app (before 3.4.2). The root cause is that searches for sharees default to querying the lookup server instead of restricting to the local Nextcloud server unless a global search is explicitly chosen, causing information disclosure of sharee searches....

CVE-2021-22906: Uncontrolled Resource Consumption

Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users...

CVE-2021-22915: Improper Restriction of Excessive Authentication Attempts

Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations. This could potentially result in an attacker bypassing rate-limit controls such as the Nextcloud brute-force protection...

CVE-2021-22913: Exposure of Sensitive Information to an Unauthorized Actor

Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user...

PT-2021-15272

Name of the Vulnerable Software and Affected Versions Nextcloud server versions prior to 19.0.11 Nextcloud server versions prior to 20.0.10 Nextcloud server versions prior to 21.0.2 Description The issue is related to brute force attacks due to the lack of inclusion of IPv6 subnets in rate-limiti...

Nextcloud server 处理逻辑错误漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A processing logic error vulnerability exists in the Nextcloud server, which stems from the fact that the Nextcloud server is vulnerable to brute-force attack...

PT-2021-15263 · Nextcloud · Nextcloud End-To-End Encryption

Name of the Vulnerable Software and Affected Versions: Nextcloud End-to-End Encryption versions prior to 1.5.3 Nextcloud End-to-End Encryption versions prior to 1.6.3 Nextcloud End-to-End Encryption versions prior to 1.7.1 Description: The issue allows any authenticated user to lock files of othe...

CVE-2021-22912: Exposure of Sensitive Information to an Unauthorized Actor

Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a global search has been explicitly chosen by the user...

PT-2021-15269

Name of the Vulnerable Software and Affected Versions Nextcloud iOS versions prior to 3.4.2 Description The issue arises when searches for sharees utilize the lookup server by default, instead of only on the local Nextcloud server, unless a global search has been explicitly chosen by the user. Th...

PT-2021-15270

Name of the Vulnerable Software and Affected Versions Nextcloud Deck versions prior to 1.2.7 Nextcloud Deck versions prior to 1.4.1 Description The issue arises from an information disclosure vulnerability. When searching for sharees, the lookup server is utilized by default instead of only the...

CVE-2021-22896: Missing Authorization

Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users...

CVE-2021-22895: Improper Certificate Validation

Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Register with a Provider" flow...

Nextcloud 信任管理问题漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud, which stems from the vulnerability of the Nextcloud desktop client prior to 3.3.1 to incorrect certificate...

PT-2021-15262

Name of the Vulnerable Software and Affected Versions Nextcloud Android App versions prior to 3.16.0 Description The issue is related to information disclosure due to searches for sharees being performed by default on the lookup server instead of only using the local Nextcloud server, unless a...

Nextcloud Mail 访问控制错误漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An access control error vulnerability exists in Nextcloud Mail that stems from a lack of permission checking in Nextcloud Mail.Nextcloud Mail version 1.9.5 an...