402 matches found
Preview generation used third-party library not suited for user-generated content
None...
Secret Circle can be joined without approval
None...
Deck shared with a Circle can be accessed by non-Circle members
None...
File Drop can be bypassed using Richdocuments app
None...
Bypass of Two Factor Authentication
None...
Exceptions may have logged Encryption-at-Rest key content
None...
Lack of ratelimit on Richdocuments OCS endpoint
None...
XSS in Nextcloud Circles
None...
Nextcloud Text app can disclose existence of folders in "File Drop" link share
None...
End-to-end encryption device setup did not verify public key
None...
Untrusted Search Path in Nextcloud Desktop Client
None...
WOPI API not protected by credentials/IP check
None...
End-to-end encryption device setup did not verify public key
None...
Lack of ratelimit on public share link mount endpoint
None...
File path disclosure of shared files in Nextcloud Text application
None...
XSS in Nextcloud Text application
None...
Webauthn tokens not removed after user has been deleted
None...
Default share permissions not respected for federated reshares
None...
Bypass of image blocking in Nextcloud Mail
None...
Lack of ratelimit on public DAV endpoint
None...
Lack of ratelimit on shareinfo endpoint
None...
Nextcloud Talk not properly disassociating users from chats after account deletion
None...
Application specific tokens can change their own scope
None...
Audit log is not properly logging unsetting of share expiration date
None...
Filenames not escaped by default in controllers using DownloadResponse
None...
Ratelimit not applied on OCS API responses
None...
Malicious Android app could access Shared Preferences of the Nextcloud Android client
None...
Malicious Android application can crash the Nextcloud Android Client
None...
Session Fixation in Nextcloud Talk
None...
Sensitive data may not be removed from storage on account removal
None...
Malicious user could break user administration page
None...
Default Nextcloud Server and iOS Client leak sharee searches to Nextcloud
None...
Trusted servers exchange can be triggered by attacker
None...
Attacker can obtain write access to any federated share/public link
None...
Files Drop public link can be added as federated share
None...
Default settings leak federated cloud ID to lookup server of all users
None...
End to end encryption folder locking is not properly protected
None...
Missing permission check on email metadata retrieval
None...
Default Nextcloud Server and Android Client leak sharee searches to Nextcloud
None...
Ratelimiting can be bypassed using IPv6 subnets
None...
Nextcloud deck sharee search leaks searches to lookupserver by default
None...
SSL certificate was not validated in Provider Registration Flow
None...
Alias creation did not validate account ID
None...
Missing URL validation allowed RCE for the server on the Desktop client (NC-SA-2021-008)
Missing validation of URLs in Nextcloud Desktop Client 3.1.2 and earlier allowed a malicious server to execute code on the client. User interaction was required...
External storage credentials stored for wrong user (NC-SA-2021-004)
A missing user check in Nextcloud 20.0.5 and prior allowed to populate your own credentials for other users external storage configuration when they did not configure one yet...
Reflected XSS when renaming malicious file (NC-SA-2021-005)
Missing sanitization in Nextcloud Server 20.0.5 and prior allowed to perform a reflected XSS when saving html as file name and causing an error on rename e.g. by renaming to an existing file. The risk is mostly mitigated due to the strict Content-Security-Policy CSP of Nextcloud, and thus mainly...
Stored XSS in markdown file with Nextcloud Talk using Internet Explorer (NC-SA-2021-002)
A missing link validation in Nextcloud Server 20.0.1 allowed to execute a stored XSS attack on Internet Explorer users by saving a javascript url in a Markdown...
Potential DDoS when posting long data into workflow validation rules (NC-SA-2021-001)
A missing input validation in Nextcloud Server 20.0.1 allowed users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules...
XSS through image upload of contacts using svg file (NC-SA-2020-045)
A missing file type check in Nextcloud Contacts 3.3.0 allowed a malicious user to upload malicious SVG files to perform XSS attacks...
XSS through image upload on contacts using svg file with png extension (NC-SA-2020-044)
A missing file type check in Nextcloud Contacts 3.4.0 allowed a malicious user to upload SVG files as PNG files to perform XSS attacks...