Vendor
Nextcloud
306 known vulnerabilities.
Products
security-advisories 260
Nextcloud Server 16
Server 7
Collectives 2
com.nextcloud.client 2
Tables 2
nextcloudpi 1
news 1
Nextcloud Contacts application 1
cookbook 1
news-android 1
Deck 1
Files Confidential 1
Richdocuments 1
Nextcloud Calendar application 1
whiteboard 1
nextcloud/talk 1
Team Folders 1
Nextcloud 1
Files Lock 1
Approval 1
android 1
nextcloud-dialogs 1
Nextcloud Server < 26.0.2 0
Nextcloud Server < 25.0.7 0
Nextcloud Server < 24.0.12.2 0
Nextcloud Server < 23.0.12.7 0
Nextcloud Server < 22.2.10.12 0
Nextcloud Server < 21.0.9.12 0
Nextcloud Server < 20.0.14.14 0
Nextcloud Server < 19.0.13.9 0
Nextcloud desktop Client < 3.6.3 0
Nextcloud mail < 1.15.0 0
Nextcloud mail < 2.2.2 0
Nextcloud Server < 24.0.12.5 0
Nextcloud Server < 23.0.12.9 0
Nextcloud Server < 22.2.10.14 0
Nextcloud < Mail 3.3.0 0
Nextcloud < Server 25.0.11 0
Nextcloud < Server 26.0.6 0
1 result · Clear filters · Feed
-
Critical 9.1CVE-2023-26482 Public exploit
Scope of workflow operations is not validated in nextcloud server
Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defin…