VendorsNextcloudgroup_foldersall versions
Vulnerabilities

Nextcloud Group Folders

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2020-8153
Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.
Published 2020-05-12 · Modified
8.1EPSS 0.019
CVE-2025-47793
Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file
Published 2025-05-16 · Analyzed
6.5EPSS 0.008
CVE-2025-66545
Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash bin
Published 2025-12-05 · Analyzed
4.3EPSS 0.003