Skip to content
OpenAdvisories
High WID-SEC-2023-2032 10 CVEs

Nextcloud: Mehrere Schwachstellen

Published Aug 9, 2023 · Updated Aug 9, 2023 · de-DE

Vendor: Nextcloud Product: Nextcloud Product: Nextcloud < Enterprise 19.0.13.10 Product: Nextcloud < Enterprise 20.0.14.15 Product: Nextcloud < Enterprise 21.0.9.13 Product: Nextcloud < Enterprise 22.2.10.14 Product: Nextcloud < Enterprise 23.0.12.9 Product: Nextcloud < Enterprise 24.0.12.5 Product: Nextcloud < Enterprise 25.0.9 Product: Nextcloud < Enterprise 26.0.4 Product: Nextcloud < Enterprise 27.0.1 Product: Nextcloud < Notes 4.8.0 Product: Nextcloud < Server 25.0.9 Product: Nextcloud < Server 26.0.4 Product: Nextcloud < Server 27.0.1 Product: Nextcloud < Talk Android 17.0.0 Product: Nextcloud < user_oidc 1.3.3 Platform: Android Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Denial of Service zu verursachen, Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.

Product

Nextcloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.

Vulnerabilities 10

  • High 8.1
    CVE-2023-39963

    Missing password confirmation when creating app passwords

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a missing password confirmation allowed …

    Nextcloud security-advisories
  • High 7.7
    CVE-2023-39962

    Users can delete external storage mount points

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a malicious user could delet…

    Nextcloud security-advisories
  • High 7.2
    CVE-2023-39957

    Path traversal allows tricking the Talk Android app into writing files into it's root directory

    Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to version 17.0.0, an unprotected intend allowed malicious third party apps to trick the Talk Android app into writing files outside of its intended cache d…

    Nextcloud security-advisories
  • Medium 6.5
    CVE-2023-39952

    Advanced permissions not respected when copying entire group folders

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1, a user can access files inside a subfolder of a groupfolder acc…

    Nextcloud security-advisories
  • Medium 5.8
    CVE-2023-39958

    Missing brute force protection on password reset token OAuth2 API controller

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, missing protection allows an attacker to brute force the client…

    Nextcloud security-advisories
  • Medium 4.8
    CVE-2023-39953

    Issuer not verified from obtained token in user_oidc

    user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, missing verification of the issuer would have allowed an attacker to perform a man-in-the-middle attack return…

    Nextcloud security-advisories
  • Low 3.8
    CVE-2023-39954

    user_oidc app stores client secret unencrypted in database

    user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, an attacker that obtained at least read access to a snapshot of the database can impersonate the Nextcloud ser…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2023-39955

    Notes attachment render HTML in preview mode

    Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note file with HTML, the content is rendered in the preview instead of the file being offered to download. Nextcloud…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2023-39959

    Existence of calendars and address books can be checked by unauthenticated users

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated users could send a DAV request which reveals whether a calendar or an address boo…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2023-39961

    Text does not respect "Allow download" permissions

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with images or an image was shared without download permissions, the user could add…

    Nextcloud security-advisories

Revision history

  1. #1

    Initiale Fassung

References