Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Nextcloud Server — FEDORA-2021-eac0e52f88 Clear all filters
TI-2021-05739 CVE-2021-22878 · GHSA-3qm7-9jrc-h4gp

Cross-site scripting in Nextcloud Server

Priority LOW 24

Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in `OC.Notification.show`.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01059 Published 2021-03-03 No fix listed CWE-79
TI-2021-05738 CVE-2021-22877 · GHSA-v65r-wc6r-r9x8

Improper access control in Nextcloud Server

Priority LOW 32

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01686 Published 2021-03-03 No fix listed CWE-284