Vulnerabilities

TI-2023-13163 CVE-2023-28645

Secure view can be bypassed by using internal API endpoint in Nextcloud richdocuments

LOW 30

Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00745 Published 2023-03-31 Fixed in 7.0.2, 6.3.2 CWE-284

TI-2023-10621 CVE-2023-25159

Nextcloud Server previews are accessible without a watermark

LOW 24

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00455 Published 2023-02-13 Fixed in 24.0.8, 6.3.1 CWE-284

TI-2023-10612 CVE-2023-25150

Document content of files can be obtained through Collabora for files of other users

LOW 27

Nextcloud office/richdocuments is an office suit for the nextcloud server platform.

CVSS 3.1MEDIUM 5.8 Network Low privileges User interaction EPSS 0.00735 Published 2023-02-08 Fixed in 3.8.7, 4.2.9 +3 CWE-284

TI-2022-13069 CVE-2022-31024

Federated editing allows iframing remote servers by default in richdocuments

LOW 30

richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00626 Published 2022-06-02 Fixed in 4.2.6, 5.0.4 CWE-284

TI-2021-16608 CVE-2021-39223

File path disclosure of shared files in Richdocuments application

LOW 26

Nextcloud is an open-source, self-hosted productivity platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01055 Published 2021-10-25 Fixed in 4.2.3 CWE-200

TI-2021-15504 CVE-2021-37629

Lack of ratelimit on Richdocuments OCS endpoint in nextcloud

LOW 27

Nextcloud Richdocuments is an open source collaborative office suite.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0138 Published 2021-09-07 Fixed in 3.8.4, 4.2.1 CWE-200

TI-2021-15503 CVE-2021-37628

File Drop can be bypassed using Richdocuments app in nextcloud

LOW 37

Nextcloud Richdocuments is an open source collaborative office suite.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0209 Published 2021-09-07 Fixed in 3.8.4, 4.2.1 CWE-639

TI-2021-12416 CVE-2021-32748

WOPI API not protected by credentials/IP check

LOW 22

Nextcloud Richdocuments in an open source self hosted online office.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00986 Published 2021-07-27 Fixed in 3.8.3, 4.2.0 CWE-862

Vulnerabilities

Filters