Server Security Vulnerabilities and Issues — Server CVE List

Lucene search

NextcloudServer

3 matches found

CVE•added 2021/03/03 6:15 p.m.•58 views

CVE-2021-22877

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.

6.5CVSS6.5AI score0.00372EPSS

CVE•added 2021/03/03 6:15 p.m.•57 views

CVE-2021-22878

Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in OC.Notification.show.

4.8CVSS5.1AI score0.00368EPSS

CVE•added 2021/03/03 6:15 p.m.•40 views

CVE-2020-8296

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.

6.7CVSS6.5AI score0.00245EPSS