Skip to content
OpenAdvisories

Archive

30 March 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2023-26482 Public exploit

    Scope of workflow operations is not validated in nextcloud server

    Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defin…