nextcloud vulnerabilities (SUSE)
37 vulnerabilities.
-
nextcloudSUSE Directory traversal in Nextcloud server 6.0 Medium -
nextcloudSUSE Missing length validation of user displayname in nextcloud server 3.5 Low -
nextcloudSUSE Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator 2.7 Low -
nextcloudSUSE Security update for nextcloud No score -
nextcloudSUSE Advanced permissions is not respected for subfolders in Nextcloud server 4.3 Medium -
nextcloudSUSE User enumeration setting not respected in Nextcloud server 5.3 Medium -
nextcloudSUSE Two-Factor Authentication not enforced for pages marked as public 6.5 Medium -
nextcloudSUSE File Traversal affecting SVG files on Nextcloud Server 8.8 High -
nextcloudSUSE Rate-limits not working on instances without configured memory cache backend 8.1 High -
nextcloudSUSE Preview generation used third-party library not suited for user-generated content in Nextcloud server 9.3 Critical -
nextcloudSUSE Exceptions may have logged Encryption-at-Rest key content in Nextcloud server 5.5 Medium -
nextcloudSUSE Bypass of Two Factor Authentication in Nextcloud server 8.1 High -
nextcloudSUSE Nextcloud Text app can disclose existence of folders in "File Drop" link share 5.3 Medium -
nextcloudSUSE Lack of ratelimit on public share link mount endpoint 5.3 Medium -
nextcloudSUSE File path disclosure of shared files in Nextcloud Text application 3.1 Low -
nextcloudSUSE Webauthn tokens not removed after user has been deleted 7.1 High -
nextcloudSUSE Default share permissions not respected for federated reshares 3.5 Low -
nextcloudSUSE Lack of ratelimit on public DAV endpoint 5.3 Medium -
nextcloudSUSE Lack of ratelimit on shareinfo endpoint 5.3 Medium -
nextcloudSUSE Application specific tokens can change their own scope 8.8 High -
nextcloudSUSE Audit log is not properly logging unsetting of share expiration date 3.3 Low -
nextcloudSUSE Filenames not escaped by default in controllers using DownloadResponse 3.5 Low -
nextcloudSUSE Ratelimit not applied on OCS API responses 3.7 Low -
nextcloudSUSE A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of... 5.4 Medium -
nextcloudSUSE A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when... 7.5 High -
nextcloudSUSE A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to... 6.5 Medium -
nextcloudSUSE A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it... 7.5 High -
nextcloudSUSE A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password... 5.3 Medium -
nextcloudSUSE A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an... 8.8 High -
nextcloudSUSE An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross... 5.4 Medium -
nextcloudSUSE An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker... 7.7 High -
nextcloudSUSE Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a... 4.3 Medium -
nextcloudSUSE An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local... 5.0 Medium -
nextcloudSUSE Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs... 4.9 Medium -
nextcloudSUSE Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain... 5.3 Medium -
nextcloudSUSE Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare... 6.5 Medium -
nextcloudSUSE A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file... 8.0 High