Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: Nextcloud Server — openSUSE-SU-2020:0220 Clear all filters
TI-2020-06537 CVE-2020-8119 · GHSA-rw2m-m5fq-rcj4

Improper authorization in Nextcloud Server

Priority LOW 22

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00915 Published 2020-02-04 No fix listed CWE-285
TI-2020-06536 CVE-2020-8118 · GHSA-gwpm-3v8h-j4wh

Server-side request forgery in Nextcloud Server

Priority LOW 25

An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.01287 Published 2020-02-04 No fix listed CWE-918
TI-2019-11712 CVE-2019-15613 · GHSA-rc6x-59rr-4g8r

Improper input validation in Nextcloud Server

Priority LOW 37

A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking file mimetypes.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0113 Published 2020-02-04 No fix listed CWE-20