Nextcloud security-advisories

• CVE-2025-47790 Medium 6.4 Nextcloud Server doesn't request second factor after session timeout 0.4%
• CVE-2024-52509 Low 3.5 Nextcloud Mail app does not respect download permissions in shares 0.5%
• CVE-2024-52508 High 8.2 Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers 0.8%
• CVE-2024-52510 Medium 4.2 Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty 0.8%
• CVE-2024-52507 Low 3.5 Share information of the Nextcloud Tables app is not limited to affected users 0.4%
• CVE-2024-52511 Medium 6.3 Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables 0.5%
• CVE-2024-52512 Low 3.3 Nextcloud User OIDC has an open redirection when logging in with User OIDC 0.4%
• CVE-2024-52513 Low 2.6 Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares 0.6%
• CVE-2024-52514 Medium 4.1 Nextcloud Server allows users to copy folder that contain files that are blocked by the files access control 0.5%
• CVE-2024-52515 Medium 5.7 Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews 0.7%
• CVE-2024-52516 Low 3.0 Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them 0.5%
• CVE-2024-52517 Medium 4.6 Nextcloud Server's global credentials of external storages are sent back to the frontend 0.6%
• CVE-2024-52518 Medium 4.4 Nextcloud Server is missing password confirmation when changing external storage options 0.5%
• CVE-2024-52519 Low 2.7 Nextcloud Server's OAuth2 client secrets were stored in a recoverable way 0.5%
• CVE-2024-52520 Medium 5.7 Nextcloud Server's link reference provider can be tricked into downloading bigger files than intended 0.8%
• CVE-2024-52521 Low 2.6 Nextcloud Server has a potential hash collision for background jobs could skip queuing them 0.4%
• CVE-2024-52523 Medium 4.6 Nextcloud Server Custom defined credentials of external storages are sent back to the frontend 0.7%
• CVE-2024-52525 Low 1.8 Nextcloud Server User password is available in memory of the PHP process 0.4%
• CVE-2024-37887 Low 3.5 Nextcloud Server's events information leaked with shared calendars on recurrence exceptions 0.4%
• CVE-2024-37886 Medium 5.4 Nextcloud user_oidc's ID4me does not validate signature or expiration 0.2%
• CVE-2024-37885 Low 3.8 Code injection in Nextcloud Desktop Client for macOS 0.3%
• CVE-2024-37884 Low 3.5 Nextcloud Server's users can delete old versions of read-only shared files 0.4%
• CVE-2024-37883 Medium 4.3 Nextcloud Deck can access comments and attachments of deleted cards 0.4%
• CVE-2024-37882 High 8.1 Nextcloud Server can reshare read&share only folder with more permissions 0.5%
• CVE-2024-37317 Medium 4.6 Nextcloud Notes app can be tricked into using a received share created before the user logged in 0.3%
• CVE-2024-37316 Medium 4.6 Nextcloud Calendar's event create can create attachments that link to other websites 0.4%
• CVE-2024-37315 Low 3.5 Nextcloud Server's read-only users can restore old versions 0.4%
• CVE-2024-37314 Low 3.5 Nextcloud Photos' shared albums have no restriction on photo removal 0.4%
• CVE-2024-37313 High 7.3 Nextcloud server allows the by-pass the second factor 0.4%
• CVE-2024-37312 Medium 6.3 Nextcloud user_oidc app's ID4me feature is available even when disabled 0.6%
• CVE-2024-22402 Medium 5.4 Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlist 0.5%
• CVE-2024-22401 Medium 4.1 All users can reset the allowed apps list for Nextcloud Guest App users 0.5%
• CVE-2024-22404 Medium 4.1 Permissions bypass in Nextcloud with the files zip app 0.5%
• CVE-2024-22403 Low 3.0 OAuth2 authorization codes are valid indefinetly in Nextcloud server 0.5%
• CVE-2024-22400 Low 3.1 Open redirect in user_saml via RelayState parameter in Nextcloud User Saml 0.5%
• CVE-2024-22213 None 0.0 Cross-site Scripting when sending HTML as a comment in the Nextcloud Deck app 0.5%
• CVE-2024-22212 Critical 9.7 Nextcloud global site selector authentication bypass 0.8%
• CVE-2023-49792 Medium 5.3 Bruteforce protection can be bypassed with misconfigured proxy 1.0%
• CVE-2023-49791 Medium 5.4 Workflows do not require password confirmation on API level 0.6%
• CVE-2023-49790 Medium 4.3 App PIN code can be bypassed in Nextcloud Files iOS 0.3%
• CVE-2023-48308 Low 3.5 Calendar app returns full stacktrace when an error happens while editing appointment 0.5%
• CVE-2023-48307 Low 3.5 Nextcloud Mail app vulnerable to Server-Side Request Forgery 0.9%
• CVE-2023-48306 Medium 5.0 Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF 0.8%
• CVE-2023-48305 Medium 4.2 Nextcloud Server user_ldap app logs user passwords in the log file on level debug 0.2%
• CVE-2023-48304 Medium 4.3 Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user 0.6%
• CVE-2023-48303 Low 2.4 Nextcloud Server admins can change authentication details of user configured external storage 0.7%
• CVE-2023-48302 Low 3.5 Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V 0.6%
• CVE-2023-48301 Low 3.5 Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name 0.6%
• CVE-2023-48239 High 8.5 Nextcloud Server users can make external storage mount points inaccessible for other users 0.9%
• CVE-2023-45150 Medium 4.3 Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsive 0.5%