Skip to content
OpenAdvisories

Archive

25 October 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.5

    File path disclosure of shared files in OfficeOnline application

    Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud OfficeOnline application prior to version 1.1.1 returned verbatim exception messages to the user. This could result in a full path disclosure on shared files. (e.g. an attacker coul…

  • Low 3.5

    Bypass of image blocking in Nextcloud Mail

    Nextcloud is an open-source, self-hosted productivity platform The Nextcloud Mail application prior to versions 1.10.4 and 1.11.0 does by default not render images in emails to not leak the read state or user IP. The privacy filter failed to filter images wit…