392 matches found
User can copy folder that contain files that are blocked by the files access control
None...
App password scope can be changed for other users (NC-SA-2018-001)
A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user...
DOM XSS vulnerability in search dialogue (NC-SA-2017-007)
Inadequate escaping lead to XSS vulnerability in the search module. To be exploitable an user has to write or paste malicious content into the search dialogue...
Calendar app used predictable proposal participant tokens
None...
admin_audit does not log all actions on files in groupfolders
None...
Authorization Bypass Through User-Controlled Key in Tables
None...
Bypass lock protection in Android app (NC-SA-2020-004)
A wrong check for the system time in the Android App 3.9.0 causes a bypass of the lock protection when changing the time of the system to the past...
XSS in SVG images when opened outside of Nextcloud
None...
Users can modify tags on files that do not belong to them
None...
Stored XSS in contacts app via organisation and title field
None...
Bypass group folder quota limit using attachment in text file
None...
Calendar app leaked user identifiers via attendee suggestion endpoint
None...
Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate
None...
Files Lock app allows users to lock and unlock files of other users
None...
3rdparty applications can create share links via socket API
None...
Approval app allows users to request approval for other users file
None...
Deck app allowed user with "Can share" permission to modify permissions of other non-owners
None...
Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share
None...
Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update
None...
Missing permission check for reading form submissions
None...
Unauthorized force-mute from missing permission check when using internal signaling
None...
Information disclosure via Desktop client when attempting to lock a file inside a end-to-end encrypted directory
None...
Limited path traversal via template API if using `{lang}` in config
None...
ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames
None...
Mail stored HTML injection in subject text
None...
Missing ownership check in Tables app allows moving columns into tables of other users
None...
WebAuthn app was updated based on public key
None...
View-only guests could see deleted Collectives pages in the trashbin
None...
Development files shipped in files_pdfviewer app
None...
Bypass of 2 Factor Authentication (NC-SA-2018-007)
Improper authentication of the second factor challenge would allow an attacker that had access to user credentials to bypass the second factor validation completely...
Contacts search allowed users to retrieve contact information of other users beyond their contact list
None...
Users with read-only permissions for team folder can restore deleted files from trash bin
None...
Participants were able to blindly delete poll drafts of other users by ID
None...
Authorization bypass in approval feature allows unauthorized file sharing with approvers
None...
View-Only shares on External Storage or Team Folders are always writeable
None...
Improper validation of data passed to JSON encoder (NC-SA-2018-006)
Improper validation of input allowed an attacker to not have their actions logged to the audit log...
Mail contact autocomplete bypasses administrator-configured user enumeration restrictions
None...
Team membership information returned on API level based on ID
None...
Privilege escalation in team folders allowing API-only delegated admins to grant unauthorized access to team folders
None...
Improper input validation in emoji field breaks sidebar in Collectives
None...