Skip to contentKiteworks Security-advisories vulnerabilities
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreServer-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud ServerCVE-2022-392113.0 Low
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreAuthentication headers exposed on by Nextcloud ServerCVE-2022-360746.4 Medium
- nextcloud files access control, kiteworks security-advisories +1 moreFile list exposure in Nextcloud Files Access ControlCVE-2022-360752.6 Low
- nextcloud password policy, kiteworks security-advisories +1 moreNextcloud Password Policy's generated passwords are not fully validated by HIBPValidatorCVE-2022-359312.7 Low
- nextcloud talk, kiteworks security-advisories +1 moreMissing rate limit when trying to join a password protected Nextcloud Talk conversationCVE-2022-359323.5 Low
- nextcloud mail, kiteworks security-advisories +1 morePassword disclosure in log file in Nextcloud Mail AppCVE-2022-311193.1 Low
- nextcloud mail, kiteworks security-advisories +1 moreUnauthenticated SSRF in 3rd party module "cerdic/csstidy"CVE-2022-311328.3 High
- nextcloud server, kiteworks security-advisories +1 moreFederated share accepting/declining is not logged in audit log in Nextcloud ServerCVE-2022-311202.1 Low
- nextcloud server, kiteworks security-advisories +1 moreMissing brute force protection on cloud federation sharing in Nextcloud ServerCVE-2022-311186.5 Medium
- kiteworks security-advisories, nextcloud mail +1 moreOwnership check missing when updating or deleting mail attachments in Nextcloud mailCVE-2022-311315.4 Medium
- nextcloud server, kiteworks security-advisories +1 moreSMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud ServerCVE-2022-310145.4 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreFederated editing allows iframing remote servers by default in richdocumentsCVE-2022-310246.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreImproper input-size validation on the user new session name in Nextcloud ServerCVE-2022-292434.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreBypass of password requirements when sharing a folder via the Circles app in Nextcloud ServerCVE-2022-291633.5 Low
- nextcloud, kiteworks security-advisories +1 moreSensitive files/data exist after deletion of user account in Nextcloud AndroidCVE-2022-29160Fix available2.8 Low
- nextcloud deck, kiteworks security-advisories +1 moreError in deleting deck cards attachment reveals the full application path in Nextcloud DeckCVE-2022-249063.5 Low
- nextcloud deck, kiteworks security-advisories +1 morePossibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud DeckCVE-2022-291595.0 Medium
- nextcloud talk, kiteworks security-advisories +1 moreExposure of Private Personal Information to an Unauthorized Actor in Nextcloud TalkCVE-2022-248902.4 Low
- nextcloud server, kiteworks security-advisories +1 moreInsufficient Verification of Data Authenticity in Nextcloud ServerCVE-2022-248892.4 Low
- nextcloud server, kiteworks security-advisories +1 morePossible Injection in Nextcloud ServerCVE-2022-248884.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreOpen Redirect in Nextcloud TalkCVE-2022-248874.3 Medium
- nextcloud, kiteworks security-advisories +1 moreExposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.clientCVE-2022-24886Fix available2.2 Low
- nextcloud, kiteworks security-advisories +1 moreImproper Authentication in Nextcloud Android FilesCVE-2022-24885Fix available2.0 Low
- nextcloud calendar, kiteworks security-advisories +1 moreCommand Injection in Appointment Emails for Nextcloud CalendarCVE-2022-24838EPSS 33.0%5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreMissing authorization in Nextcloud textCVE-2021-412336.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreHigh memory usage in Nextcloud serverCVE-2022-247413.5 Low
- nextcloud server, kiteworks security-advisories +1 moreAdvanced permissions is not respected for subfolders in Nextcloud serverCVE-2021-412414.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreUser enumeration setting not respected in Nextcloud serverCVE-2021-412395.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk app exposes chat messages on lockscreenCVE-2021-411812.4 Low
- nextcloud talk, kiteworks security-advisories +1 moreGeolocation preview links can be set to arbitrary links in nextcloud talkCVE-2021-411804.7 Medium
- nextcloud, kiteworks security-advisories +1 morePermission bypass in Nextcloud Android AppCVE-2021-41166Fix available4.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreXSS in TalkCVE-2021-392226.4 Medium
- nextcloud server, kiteworks security-advisories +1 moreTwo-Factor Authentication not enforced for pages marked as publicCVE-2021-411796.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreFile Traversal affecting SVG files on Nextcloud ServerCVE-2021-411788.8 High
- nextcloud server, kiteworks security-advisories +1 moreRate-limits not working on instances without configured memory cache backendCVE-2021-411778.1 High
- nextcloud officeonline, kiteworks security-advisories +1 moreFile path disclosure of shared files in OfficeOnline applicationCVE-2021-392243.5 Low
- nextcloud deck, kiteworks security-advisories +1 moreMissing permission check on Deck APICVE-2021-392258.1 High
- nextcloud richdocuments, kiteworks security-advisories +1 moreFile path disclosure of shared files in Richdocuments applicationCVE-2021-392234.8 Medium
- nextcloud contacts, kiteworks security-advisories +1 moreXSS in ContactsCVE-2021-392216.4 Medium
- nextcloud mail, kiteworks security-advisories +1 moreBypass of image blocking in Nextcloud MailCVE-2021-392203.5 Low
- nextcloud server, kiteworks security-advisories +1 morePreview generation used third-party library not suited for user-generated content in Nextcloud serverCVE-2021-328029.3 Critical
- nextcloud server, kiteworks security-advisories +1 moreExceptions may have logged Encryption-at-Rest key content in Nextcloud serverCVE-2021-328015.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreBypass of Two Factor Authentication in Nextcloud serverCVE-2021-328008.1 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Text app can disclose existence of folders in "File Drop" link shareCVE-2021-327665.3 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreLack of ratelimit on Richdocuments OCS endpoint in nextcloudCVE-2021-376295.3 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreFile Drop can be bypassed using Richdocuments app in nextcloudCVE-2021-376287.5 High
- nextcloud circles, kiteworks security-advisories +1 moreCross-Site Scripting in Nextcloud CirclesCVE-2021-327825.8 Medium
- nextcloud circles, kiteworks security-advisories +1 moreSecret Circle can be joined without approval in Nextcloud CirclesCVE-2021-376306.5 Medium
- nextcloud deck, kiteworks security-advisories +1 moreCircle can be accessed by non-Circle members in Nextcloud DeckCVE-2021-376316.5 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreUntrusted Search Path in Nextcloud Desktop ClientCVE-2021-376177.3 High
- Show moreLoading…