384 matches found
No password length limit when creating a user as an administrator
None...
Password disclosure in log file when providing incorrect additional data on initial setup of Mail App
None...
Bypass of password requirements when sharing a folder via the Circles app
None...
Control character filtering misses leading and trailing whitespace in file and folder names
None...
Preview generation used third-party library not suited for user-generated content
None...
Brute force protection allows to send more requests than intended
None...
user_oidc app is missing bruteforce protection
None...
Chat room membership disclosed via autocompletion when not a member yourself
None...
Mail app temporarily stores cleartext password in database until OAuth2 setup is done
None...
Missing User Presence Check in Nextcloud WebAuthn login
None...
Notes app can be tricked into using a received share created before the user logged in
None...
Exception logging in Sharepoint app reveals clear-text connection details
None...
File Traversal affecting SVG files on Nextcloud Server
None...
Nextcloud deck sharee search leaks searches to lookupserver by default
None...
Open redirect in user_saml via RelayState parameter
None...
Path traversal allows tricking the Talk Android app into writing files into it's root directory
None...
Federated editing allows iframing remote servers by default
None...
User enumeration setting not obeyed in User Status API
None...
Secret Circle can be joined without approval
None...
Potential hash collision for background jobs could skip queuing them
None...
user_ldap app logs user passwords in the log file on level debug
None...
Error in calendar when booking an appointment reveals the full path of the website
None...
Calendar name length not validated before writing to database
None...
Login and token disclosure to other Nextcloud services (NC-SA-2019-017)
Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notifications...
Users can make external storage mount points inaccessible for other users
None...
Basic auth header on WebDAV requests is not brute-force protected
None...
IDOR Vulnerability in Nextcloud Mail
None...
Listing folder content blocked by files access control when received as share
None...
Missing rate limit when trying to join a password protected Nextcloud Talk conversation
None...
Sensitive files/ data exists post deletion of user account
None...
Error in deleting deck cards attachment reveals the full application path
None...
ID4me feature of OpenID connect app available even when disabled
None...
Self XSS when sending HTML as a comment in the Deck app
None...
System addressbooks can be modified by malicious trusted server
None...
App pin of the Android app can be bypassed via thirdparty apps generating deep links
None...
High memory usage for generating preview of broken image
None...
Mail auto configurator sends account information to `autoconfig.tld` server when no auto-configuration is possible
None...
Desktop client does not verify received singed certificate in end-to-end encryption
None...
Rate-limits not working on instances without configured memory cache backend
None...
SQL injection in Android app content provider (NC-SA-2019-005)
The content provider of the app accepted arbitrary strings in the field list of the returned file list. This allowed an attacker to run harmful queries, destroying the local cache of the android app. The server data however was never in danger, so removing the account and setting it up again can...
Potential share collision for recipients when caching is enabled
None...
Cleartext Transmission of Sensitive Information in user_oidc
None...
Moderator can enable cam/mic remotely if cam/mic-permission was disabled while user has activated cam/mic
None...
Lack of ratelimit on Richdocuments OCS endpoint
None...
Webauthn tokens not removed after user has been deleted
None...
Custom defined credentials of external storages are sent back to the frontend
None...
Read-only users can restore old versions
None...
Missing brute force protection on OAuth2 API controller
None...