Skip to content
OpenAdvisories

Product · Nextcloud

cookbook

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2023-31128

    NextCloud Cookbook's pull-checks.yml workflow is vulnerable to OS Command Injection

    NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the `master` branch and commit 489bb744 on the `main-0.9.x` branch, the `pull-checks.yml` workflow is vulnerable to command injection attacks because of using an untrusted `github.head_re…

    Nextcloud cookbook