386 matches found
Contacts - PHOTO svg only sanitized if mime type is all lower case
None...
Command Injection in Appointment Emails for Calendar
None...
Unauthenticated SSRF in 3rd party module "cerdic/csstidy"
None...
Attacker can obtain write access to any federated share/public link
None...
Default share permissions not respected for federated reshares
None...
Potential directory traversal in OC\Files\Node\Folder::getFullPath
None...
Can reshare read&share only folder with more permissions
None...
Blind SSRF via server URL input in the Nextcloud Mail app
None...
XSS through image upload on contacts using svg file with png extension (NC-SA-2020-044)
A missing file type check in Nextcloud Contacts 3.4.0 allowed a malicious user to upload SVG files as PNG files to perform XSS attacks...
Previews are accessible without a watermark
None...
Application specific tokens can change their own scope
None...
App pin of the iOS app can be bypassed
None...
Issuer not verified from obtained token in user_oidc
None...
DNS pin middleware can be tricked into DNS rebinding allowing SSRF
None...
Folder names of "File Drop" share accessible
None...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Server
None...
Missing password confirmation when creating app passwords
None...
Self reflected HTML injection in Desktop client
None...
CSRF vulnerability in Nextcloud Desktop Client on Windows when clicking malicious link
None...
Desktop clients misbehaves with end-to-end encryption when the server returns an empty list of metadata keys
None...
Blind SSRF in the Mail app on avatar endpoint
None...
Advanced permissions not respected when copying entire group folders
None...
Suspicious login app ships old league/flysystem version
None...
Secure view can be bypassed by using internal API endpoint
None...
Authentication header is passed on by Nextcloud Server due to a vulnerable GuzzleHTTP version
None...
XSS in Files PDF viewer (NC-SA-2020-019)
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...
Password reset endpoint is not brute force protected
None...
Download permissions can be changed by resharer
None...
Document content of files can be obtained through Collabora for files of other users
None...
Deck card reference caching can leak data to unauthorized users
None...
Database resource exhaustion for logged-in users via sharee recommendations with circles
None...
Untrusted Search Path in Nextcloud Desktop Client
None...
Session Fixation in Nextcloud Talk
None...
Incomplete sanitization of SVG files allows to embed other images into previews
None...
Open redirect on "Unsupported browser" warning
None...
Users can delete external storage mount points
None...
Force an admin to install recommended applications
None...
User password is available in memory of the PHP process
None...
CSRF protection on user_oidc login returned the expected token in case of an error
None...
No password length limit when creating a user as an administrator
None...
File Drop can be bypassed using Richdocuments app
None...
End-to-End encrypted file-drops can be made inaccessible
None...
Talk app did allow access to sensitive chat messages on lockscreen
None...
Bruteforce protection can be bypassed with misconfigured proxy
None...
Notes attachment render HTML in preview mode
None...
Calendar name length not validated before writing to database
None...
Server-Side Request Forgery (SSRF) via potential filter bypass with too lax local domain checking
None...
Events information leaked with shared calendars on recurrence exceptions
None...