Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: nextcloud security-advisories — FEDORA-2021-9b421b78af Clear all filters
TI-2021-12373 CVE-2021-32705

Lack of ratelimit on public DAV endpoint

Priority LOW 36

Nextcloud Server is a Nextcloud package that handles data storage.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01702 Published 2021-07-12 Fixed in 19.0.13, 20.0.11 +1 CWE-799
TI-2021-12371 CVE-2021-32703

Lack of ratelimit on shareinfo endpoint

Priority LOW 27

Nextcloud Server is a Nextcloud package that handles data storage.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01512 Published 2021-07-12 Fixed in 19.0.13, 20.0.11 +1 CWE-799
TI-2021-12346 CVE-2021-32678

Ratelimit not applied on OCS API responses

Priority LOW 27

Nextcloud Server is a Nextcloud package that handles data storage.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01374 Published 2021-07-12 Fixed in 19.0.13, 20.0.11 +1 CWE-799