nextcloud vulnerabilities (Bitnami)
30 vulnerabilities.
-
nextcloudBitnami File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files... 6.5 Medium -
nextcloudBitnami The Photos app's filter-based "smart albums" build their file listing using the search... 6.5 Medium -
nextcloudBitnami Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before... 6.2 Medium -
nextcloudBitnami After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve... 3.1 Low -
nextcloudBitnami Nextcloud: Propfind requests for file comments allowed to load comments for other files 6.8 Medium -
nextcloudBitnami Nextcloud: Bypass of second factor authentication on DAV endpoints 5.9 Medium -
nextcloudBitnami Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay 5.9 Medium -
nextcloudBitnami Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update 8.1 High -
nextcloudBitnami Nextcloud: Valid share tokens allow to access tempory upload files of share owner 6.3 Medium -
nextcloudBitnami Nextcloud: PIN bypass in PassCodeActivity via back button 4.6 Medium -
nextcloudBitnami Nextcloud Server admin_audit does not log all actions on files in groupfolders 4.3 Medium -
nextcloudBitnami Nextcloud Server users can modify tags on files that do not belong to them 4.3 Medium -
nextcloudBitnami Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact list 4.5 Medium -
nextcloudBitnami App PIN code can be bypassed in Nextcloud Files iOS 4.3 Medium -
nextcloudBitnami Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders 6.9 Medium -
nextcloudBitnami App lockout in nextcloud Android app can be bypassed via thirdparty apps 4.4 Medium -
nextcloudBitnami App pin of the iOS app can be bypassed in Nextcloud iOS 4.4 Medium -
nextcloudBitnami Access to internal files of the Nextcloud Android app 3.2 Low -
nextcloudBitnami Sensitive files/data exist after deletion of user account in Nextcloud Android 2.8 Low -
nextcloudBitnami Exposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client 2.2 Low -
nextcloudBitnami Improper Authentication in Nextcloud Android Files 2.0 Low -
nextcloudBitnami Permission bypass in Nextcloud Android App 4.3 Medium -
nextcloudBitnami SQL Injection in FileContentProvider (GHSL-2021-1007) 7.5 High -
nextcloudBitnami End-to-end encryption device setup did not verify public key 5.7 Medium -
nextcloudBitnami Malicious Android application can crash the Nextcloud Android Client 4.1 Medium -
nextcloudBitnami Malicious Android app could access Shared Preferences of the Nextcloud Android client 3.9 Low -
nextcloudBitnami Nextcloud Android App (com.nextcloud.client) before v3.16.0 is vulnerable to information disclosure due to searches for sharees being performed by default on the lookup server instead of only using th… 6.5 Medium -
nextcloudBitnami Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users. 4.3 Medium -
nextcloudBitnami Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a gl… 6.5 Medium -
nextcloudBitnami Sensitive data may not be removed from storage on account removal 4.7 Medium