Skip to content
OpenAdvisories
Medium WID-SEC-2023-0847 3 CVEs

Nextcloud: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Published Apr 4, 2023 · Updated Sep 17, 2025 · Revision 2 · de-DE

Vendor: Debian Vendor: Nextcloud Product: Linux Product: Nextcloud Platform: Android Platform: iOS Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um Dateien zu manipulieren.

Product

Nextcloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.

Vulnerabilities 3

  • Medium 6.9
    CVE-2023-28999

    Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders

    Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encryp…

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu Alpine
  • Medium 6.7
    CVE-2023-28997

    Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can recover and modify the contents of end-to-end encrypted files. Users should upgrade…

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu Alpine
  • Medium 6.7
    CVE-2023-28998

    Nextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keys

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover…

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu Alpine

Revision history

  1. #2

    Neue Updates von Debian aufgenommen

  2. #1

    Initiale Fassung

References