Skip to content
OpenAdvisories
High WID-SEC-2024-3484 18 CVEs

Nextcloud: Mehrere Schwachstellen

Published Nov 17, 2024 · Updated Nov 17, 2024 · de-DE

Vendor: Nextcloud Product: Nextcloud Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen oder Daten zu manipulieren.

Product

Nextcloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.

Vulnerabilities 18

  • Critical 9.1
    CVE-2024-46958

    In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may beco…

    nextcloud-desktop nextcloud-desktop Debian Ubuntu
  • High 8.2
    CVE-2024-52508

    Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers

    Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like user@example.tld that does not support auto configuration, and an attacker managed to register autocon…

    Nextcloud security-advisories
  • Medium 6.3
    CVE-2024-52511

    Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables

    Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no access to. It is recommended that the Nextcloud Tables is upgr…

    Nextcloud security-advisories
  • Medium 5.7
    CVE-2024-52515

    Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews

    Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file referencing paths. If the file would exist the preview of the SVG would preview the…

    Nextcloud security-advisories
  • Medium 5.7
    CVE-2024-52520

    Nextcloud Server's link reference provider can be tricked into downloading bigger files than intended

    Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downloading bigger websites than intended, to find open-graph data. It is recommended that the Nextcloud Server is u…

    Nextcloud security-advisories
  • Medium 4.6
    CVE-2024-52517

    Nextcloud Server's global credentials of external storages are sent back to the frontend

    Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into the frontend again, allowing to read them in plain text when an attacker already has access to an active session…

    Nextcloud security-advisories
  • Medium 4.6
    CVE-2024-52523

    Nextcloud Server Custom defined credentials of external storages are sent back to the frontend

    Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external storage with fixed credentials, the API returns them and adds them into the frontend again, allowing to read them in plain text when an attacker…

    Nextcloud security-advisories
  • Medium 4.4
    CVE-2024-52518

    Nextcloud Server is missing password confirmation when changing external storage options

    Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or administrator, the attacker would be able to create, change or delete external storages without having to confirm the password. It is recommended…

    Nextcloud security-advisories
  • Medium 4.2
    CVE-2024-52510 Public exploit

    Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client did not stop with an error but allowed by-passing the signature validation, if a manipulated server sends an empty initial signature. It i…

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu
  • Medium 4.1
    CVE-2024-52514

    Nextcloud Server allows users to copy folder that contain files that are blocked by the files access control

    Nextcloud Server is a self hosted personal cloud system. After a user received a share with some files inside being blocked by the files access control, the user would still be able to copy the intermediate folder inside Nextcloud allowing them to afterwards …

    Nextcloud security-advisories
  • Low 3.5
    CVE-2024-52507

    Share information of the Nextcloud Tables app is not limited to affected users

    Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is shared with which groups and users and the respective permissions was not limited to affected users. It is recommended that the Nextcloud Ta…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2024-52509

    Nextcloud Mail app does not respect download permissions in shares

    Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly allowed attaching shared files without download permissions as attachments. This allowed users to send them the files to themselves and then …

    Nextcloud security-advisories
  • Low 3.3
    CVE-2024-52512

    Nextcloud User OIDC has an open redirection when logging in with User OIDC

    user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that would redirect the user to a provided URL after successfully authenticating. It is recommended that the Nextcloud User OIDC app is upgraded …

    Nextcloud security-advisories
  • Low 3.0
    CVE-2024-52516

    Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them

    Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nex…

    Nextcloud security-advisories
  • Low 2.7
    CVE-2024-52519

    Nextcloud Server's OAuth2 client secrets were stored in a recoverable way

    Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so that an attacker that got access to a backup of the database and the Nextcloud config file, would be able to decrypt them. It is recommende…

    Nextcloud security-advisories
  • Low 2.6
    CVE-2024-52513

    Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares

    Nextcloud Server is a self hosted personal cloud system. After receiving a "Files drop" or "Password protected" share link a malicious user was able to download attachments that are referenced in Text files without providing the password. It is recommended th…

    Nextcloud security-advisories
  • Low 2.6
    CVE-2024-52521

    Nextcloud Server has a potential hash collision for background jobs could skip queuing them

    Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely being identified as already existing and not be queued for execu…

    Nextcloud security-advisories
  • Low 1.8
    CVE-2024-52525

    Nextcloud Server User password is available in memory of the PHP process

    Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unencrypted in the session data. The session data is encrypted before being saved in the session storage (Redis or disk), but it would allow a …

    Nextcloud security-advisories

Revision history

  1. #1

    Initiale Fassung

References