Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um Daten zu manipulieren und um Anmeldeinformationen offenzulegen.
Product
Nextcloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.
Vulnerabilities 2
-
High 8.5
Nextcloud user scoped external storage can be used to gather credentials of other users
Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20.0.14.14, …
-
High 7.6
Nextcloud system addressbooks can be modified by malicious trusted server
NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12,…
Revision history
-
#1
Initiale Fassung
References
-
Nextcloud Security Advisory vom 2023-06-22
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h7f7-535f-7q87
-
Nextcloud Security Advisory vom 2023-06-22
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-637g-xp2c-qh5h