Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-45544 EUVD-2026-33714

Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService

Published Jun 1, 2026 · Updated Jun 1, 2026 · Assigned by GitHub_M

Description

Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users with read-only permissions in Nextcloud Tables. This issue has been patched in versions 1.0.4 and 2.0.0.

Affected products

VendorProductAffectedFixed
nextcloud security-advisories >= 0.8.0, < 1.0.4 —

Advisories 1

References