Nextcloud security-advisories

• CVE-2023-45149 Medium 4.3 Password of talk conversations can be bruteforced in Nextcloud 0.6%
• CVE-2023-45148 Medium 4.3 Rate limiter not working reliable when Memcached is installed in Nextcloud 0.9%
• CVE-2023-45151 Medium 6.5 OAuth2 client_secret stored in plain text in the Nextcloud database 0.6%
• CVE-2023-45660 Medium 4.3 Require strict cookies for image proxy requests in Nextcloud Mail 0.8%
• CVE-2023-39960 Medium 5.0 Nextcloud Server has improper restriction of excessive authentication attempts on WebDAV endpoint 0.7%
• CVE-2023-39963 High 8.1 Missing password confirmation when creating app passwords 0.3%
• CVE-2023-39962 High 7.7 Users can delete external storage mount points 1.0%
• CVE-2023-39961 Low 3.5 Text does not respect "Allow download" permissions 0.6%
• CVE-2023-39959 Low 3.5 Existence of calendars and address books can be checked by unauthenticated users 0.6%
• CVE-2023-39958 Medium 5.8 Missing brute force protection on password reset token OAuth2 API controller 0.7%
• CVE-2023-39957 High 7.2 Path traversal allows tricking the Talk Android app into writing files into it's root directory 0.4%
• CVE-2023-39955 Low 3.5 Notes attachment render HTML in preview mode 0.6%
• CVE-2023-39954 Low 3.8 user_oidc app stores client secret unencrypted in database 0.4%
• CVE-2023-39953 Medium 4.8 Issuer not verified from obtained token in user_oidc 0.5%
• CVE-2023-39952 Medium 6.5 Advanced permissions not respected when copying entire group folders 0.8%
• CVE-2023-35928 High 8.5 Nextcloud user scoped external storage can be used to gather credentials of other users 1.0%
• CVE-2023-35927 High 7.6 Nextcloud system addressbooks can be modified by malicious trusted server 0.8%
• CVE-2023-35173 Medium 5.7 End-to-End encrypted file-drops can be made inaccessible 0.5%
• CVE-2023-35172 High 8.7 Nextcloud Server password reset endpoint is not brute force protected 0.9%
• CVE-2023-35171 Medium 4.1 Nextcloud Server vulnerable to open redirect on "Unsupported browser" warning 0.6%
• CVE-2023-32320 High 8.7 Nextcloud Server's brute force protection allows someone to send more requests than intended 0.9%
• CVE-2023-33183 Low 2.6 Error in calendar when booking an appointment reveals the full path of the website 0.4%
• CVE-2023-33182 None 0.0 Nextcloud Contacts photos only sanitized if mime type is all lower case 0.8%
• CVE-2023-33184 Low 3.5 Blind SSRF in the Nextcloud Mail app on avatar endpoint 0.5%
• CVE-2023-32319 High 8.1 Basic auth header on WebDAV requests is not brute-force protected in Nextcloud 0.7%
• CVE-2023-32318 High 7.2 User session not correctly destroyed on logout 0.2%
• CVE-2023-32074 High 8.0 Nextcloud user_oidc app is missing brute force protection 0.9%
• CVE-2023-28847 Low 3.1 Nextcloud Server missing brute force protection for passwords of password protected share links 0.8%
• CVE-2023-30540 Low 3.5 Chat poll data can still be queried from API after purging history in Nextcloud talk 0.7%
• CVE-2023-30539 Medium 6.5 Users can set up workflows using restricted and invisible system tags in Nextcloud 0.6%
• CVE-2023-29000 Medium 5.4 Nextcloud Desktop client does not verify received singed certificate in end-to-end encryption 0.4%
• CVE-2023-28999 Medium 6.9 Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders 0.7%
• CVE-2023-28998 Medium 6.7 Nextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keys 0.7%
• CVE-2023-28997 Medium 6.7 Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files 1.1%
• CVE-2023-28848 Medium 4.8 CSRF protection on user_oidc login returned the expected token in case of an error 0.3%
• CVE-2023-28834 Low 3.5 Full path of data directory exposed to Nextcloud server users 0.8%
• CVE-2023-28845 Low 3.5 Chat room membership disclosed via autocompletion in Nextcloud talk 0.4%
• CVE-2023-28844 Medium 5.7 User without download rights can download older version of that file in nextcloud server 0.6%
• CVE-2023-28645 Medium 5.7 Secure view can be bypassed by using internal API endpoint in Nextcloud richdocuments 0.7%
• CVE-2023-28835 Low 3.5 Insecure randomness for default password in nextcloud 0.5%
• CVE-2023-28833 Low 2.4 Unrestricted filenames for logo or favicon as admin in the theming settings in nextcloud server 0.8%
• CVE-2023-28644 Medium 5.7 Reference fetch can saturate the server bandwidth for 10 seconds in nextcloud server 0.6%
• CVE-2023-28643 Medium 5.5 Potential share collision for recipients when caching is enabled in nextcloud server 0.8%
• CVE-2023-26482 Critical 9.1 Scope of workflow operations is not validated in nextcloud server 4.2%
• CVE-2023-28646 Medium 4.4 App lockout in nextcloud Android app can be bypassed via thirdparty apps 0.2%
• CVE-2023-28647 Medium 4.4 App pin of the iOS app can be bypassed in Nextcloud iOS 0.3%
• CVE-2023-25817 Low 3.5 Delete permissions are not saved when creating public share in Nextcloud server 0.6%
• CVE-2023-25818 Medium 5.3 Missing brute force protection on password reset token in Nextcloud Server 0.6%
• CVE-2023-25820 Medium 4.2 Nextcloud Server and Enterprise Server missing brute force protection on password confirmation modal 0.2%
• CVE-2023-26041 Low 2.6 Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured 0.8%