Nextcloud Nextcloud Server any version

Nextcloud download permissions can be changed by resharer

Nextcloud Server missing brute force protection for passwords of password protected share links

Authentication headers exposed on by Nextcloud Server

Reference fetch can saturate the server bandwidth for 10 seconds in nextcloud server

Nextcloud Server has improper restriction of excessive authentication attempts on WebDAV endpoint

Insecure randomness for default password in nextcloud

Directory traversal in Nextcloud server

Nextcloud server allows the by-pass the second factor

Nextcloud Server User password is available in memory of the PHP process

User session not correctly destroyed on logout

Missing brute force protection on password reset token in Nextcloud Server

A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it.

Nextcloud: Propfind requests for file comments allowed to load comments for other files

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.

High memory usage in Nextcloud server

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL.

A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability when subscribing to a malicious calendar URL.

nextcloud vulnerable to Uncontrolled Resource Consumption

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.

Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link.

Missing length validation of user displayname in nextcloud server

Advanced permissions not respected when copying entire group folders

Nextcloud Server's link reference provider can be tricked into downloading bigger files than intended

Missing authorization in Nextcloud text

Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file

Missing brute force protection on cloud federation sharing in Nextcloud Server

Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews

Nextcloud Server Custom defined credentials of external storages are sent back to the frontend

User without download rights can download older version of that file in nextcloud server

Nextcloud: Limited path traversal via template API if using `{lang}` in config

Exception logging in Sharepoint app reveals clear-text connection details

Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file access

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for.

Nextcloud: Hidden Public Link creation when sharing to a Team External Member

Nextcloud Server doesn't request second factor after session timeout

Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0.12.29, 24.0.12.28, 25.0.13.23, 26.0.13.20, 27.1.11.20, 28.0.14.11, 29.0.16.8, 30.0.17, 31.0.10, and 32.0.1 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted PDF file to viewer.html. This issue is related to CVE-2024-4367, but the root cause of this Nextcloud issue is that the product exposes executable example code on a same-origin basis.

Nextcloud: Files Lock app allows users to lock and unlock files of other users

Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message, this led to a reflected Cross-Site-Scripting vulnerability.