nextcloud vulnerabilities (openSUSE)
37 vulnerabilities.
-
nextcloudopenSUSE Directory traversal in Nextcloud server 6.0 Medium -
nextcloudopenSUSE Missing length validation of user displayname in nextcloud server 3.5 Low -
nextcloudopenSUSE Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator 2.7 Low -
nextcloudopenSUSE Security update for nextcloud No score -
nextcloudopenSUSE Advanced permissions is not respected for subfolders in Nextcloud server 4.3 Medium -
nextcloudopenSUSE User enumeration setting not respected in Nextcloud server 5.3 Medium -
nextcloudopenSUSE Two-Factor Authentication not enforced for pages marked as public 6.5 Medium -
nextcloudopenSUSE File Traversal affecting SVG files on Nextcloud Server 8.8 High -
nextcloudopenSUSE Rate-limits not working on instances without configured memory cache backend 8.1 High -
nextcloudopenSUSE Preview generation used third-party library not suited for user-generated content in Nextcloud server 9.3 Critical -
nextcloudopenSUSE Exceptions may have logged Encryption-at-Rest key content in Nextcloud server 5.5 Medium -
nextcloudopenSUSE Bypass of Two Factor Authentication in Nextcloud server 8.1 High -
nextcloudopenSUSE Nextcloud Text app can disclose existence of folders in "File Drop" link share 5.3 Medium -
nextcloudopenSUSE Lack of ratelimit on public share link mount endpoint 5.3 Medium -
nextcloudopenSUSE File path disclosure of shared files in Nextcloud Text application 3.1 Low -
nextcloudopenSUSE Webauthn tokens not removed after user has been deleted 7.1 High -
nextcloudopenSUSE Default share permissions not respected for federated reshares 3.5 Low -
nextcloudopenSUSE Lack of ratelimit on public DAV endpoint 5.3 Medium -
nextcloudopenSUSE Lack of ratelimit on shareinfo endpoint 5.3 Medium -
nextcloudopenSUSE Application specific tokens can change their own scope 8.8 High -
nextcloudopenSUSE Audit log is not properly logging unsetting of share expiration date 3.3 Low -
nextcloudopenSUSE Filenames not escaped by default in controllers using DownloadResponse 3.5 Low -
nextcloudopenSUSE Ratelimit not applied on OCS API responses 3.7 Low -
nextcloudopenSUSE A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of... 5.4 Medium -
nextcloudopenSUSE A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when... 7.5 High -
nextcloudopenSUSE A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to... 6.5 Medium -
nextcloudopenSUSE A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it... 7.5 High -
nextcloudopenSUSE A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password... 5.3 Medium -
nextcloudopenSUSE A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an... 8.8 High -
nextcloudopenSUSE An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross... 5.4 Medium -
nextcloudopenSUSE An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker... 7.7 High -
nextcloudopenSUSE Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a... 4.3 Medium -
nextcloudopenSUSE An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local... 5.0 Medium -
nextcloudopenSUSE Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs... 4.9 Medium -
nextcloudopenSUSE Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain... 5.3 Medium -
nextcloudopenSUSE Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare... 6.5 Medium -
nextcloudopenSUSE A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file... 8.0 High