Nextcloud vulnerabilities
306 CVEs and advisories name Nextcloud as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-45150Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsive
- CVE-2023-45149Password of talk conversations can be bruteforced in Nextcloud
- CVE-2023-45148Rate limiter not working reliable when Memcached is installed in Nextcloud
- CVE-2023-45151OAuth2 client_secret stored in plain text in the Nextcloud database
- CVE-2023-45660Require strict cookies for image proxy requests in Nextcloud Mail
- CVE-2023-39960Nextcloud Server has improper restriction of excessive authentication attempts on WebDAV endpoint
- CVE-2023-39963Missing password confirmation when creating app passwords
- CVE-2023-39962Users can delete external storage mount points
- CVE-2023-39961Text does not respect "Allow download" permissions
- CVE-2023-39959Existence of calendars and address books can be checked by unauthenticated users
- CVE-2023-39958Missing brute force protection on password reset token OAuth2 API controller
- CVE-2023-39957Path traversal allows tricking the Talk Android app into writing files into it's root directory
- CVE-2023-39955Notes attachment render HTML in preview mode
- CVE-2023-39954user_oidc app stores client secret unencrypted in database
- CVE-2023-39953Issuer not verified from obtained token in user_oidc
- CVE-2023-39952Advanced permissions not respected when copying entire group folders
- CVE-2023-35928Nextcloud user scoped external storage can be used to gather credentials of other users
- CVE-2023-35927Nextcloud system addressbooks can be modified by malicious trusted server
- CVE-2023-35173End-to-End encrypted file-drops can be made inaccessible
- CVE-2023-35172Nextcloud Server password reset endpoint is not brute force protected
- CVE-2023-35171Nextcloud Server vulnerable to open redirect on "Unsupported browser" warning
- CVE-2023-32320Nextcloud Server's brute force protection allows someone to send more requests than intended
- CVE-2023-33183Error in calendar when booking an appointment reveals the full path of the website
- CVE-2023-33182Nextcloud Contacts photos only sanitized if mime type is all lower case
- CVE-2023-33184Blind SSRF in the Nextcloud Mail app on avatar endpoint
- CVE-2023-32319Basic auth header on WebDAV requests is not brute-force protected in Nextcloud
- CVE-2023-31128NextCloud Cookbook's pull-checks.yml workflow is vulnerable to OS Command Injection
- CVE-2023-32318User session not correctly destroyed on logout
- CVE-2023-32074Nextcloud user_oidc app is missing brute force protection
- CVE-2023-28847Nextcloud Server missing brute force protection for passwords of password protected share links