CVE-2021-41178

CVE-2021-41178 describes a file traversal vulnerability in Nextcloud Server that allowed an attacker to download arbitrary SVG images from the host, including user-supplied files, prior to versions 20.0.13, 21.0.5, and 22.2.0. The XSS/phishing vector is mitigated by Nextcloud’s Content-Security-P...