Nextcloud Richdocuments vulnerabilities

• nextcloud richdocuments A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token. CVE-2026-67400 3.5 LowOctober 27, 2026
• nextcloud richdocuments, kiteworks security-advisories +1 more Secure view can be bypassed by using internal API endpoint in Nextcloud richdocuments CVE-2023-28645 5.7 MediumMarch 31, 2023
• nextcloud server, richdocuments, kiteworks security-advisories +2 more Nextcloud Server previews are accessible without a watermark CVE-2023-25159 2.3 LowFebruary 13, 2023
• nextcloud richdocuments, kiteworks security-advisories +1 more Document content of files can be obtained through Collabora for files of other users CVE-2023-25150 5.8 MediumFebruary 8, 2023
• nextcloud richdocuments, kiteworks security-advisories +1 more Federated editing allows iframing remote servers by default in richdocuments CVE-2022-31024 6.5 MediumJune 2, 2022
• nextcloud richdocuments, kiteworks security-advisories +1 more File path disclosure of shared files in Richdocuments application CVE-2021-39223 4.8 MediumOctober 25, 2021
• nextcloud richdocuments, kiteworks security-advisories +1 more Lack of ratelimit on Richdocuments OCS endpoint in nextcloud CVE-2021-37629 5.3 MediumSeptember 7, 2021
• nextcloud richdocuments, kiteworks security-advisories +1 more File Drop can be bypassed using Richdocuments app in nextcloud CVE-2021-37628 7.5 HighSeptember 7, 2021
• nextcloud richdocuments, kiteworks security-advisories +1 more WOPI API not protected by credentials/IP check CVE-2021-32748 4.3 MediumJuly 27, 2021