Nextcloud Server — набор клиент-серверных программ для создания и использования хранилища данных.
Релизный цикл, информация об уязвимостях
График релизов
Количество 456
CVE-2023-35171
NextCloud Server and NextCloud Enterprise Server provide file storage ...
CVE-2023-35927
NextCloud Server and NextCloud Enterprise Server provide file storage ...
CVE-2023-35172
NextCloud Server and NextCloud Enterprise Server provide file storage ...
CVE-2023-35928
Nextcloud Server is a space for data storage on Nextcloud, a self-host ...
CVE-2023-32320
Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the amount of faulty requests succeeded the limit by the time the response was sent to the client. This allowed someone to send as many requests the server could handle in parallel to bruteforce protected details instead of the configured limit, default 8. Nextcloud Server versions 25.0.7 and 26.0.2 and Nextcloud Enterprise Server versions 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7 and 26.0.2 contain patches for this issue.
CVE-2023-32320
Nextcloud Server is a data storage system for Nextcloud, a self-hosted ...
CVE-2023-32319
Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header allowed to brute-force user credentials when the provided user name was not an email address. Users from version 24.0.0 onward are affected. This issue has been addressed in releases 24.0.11, 25.0.5 and 26.0.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-32318
Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session on logout if cookies were not cleared manually. After successfully authenticating with any other account the previous session would be continued and the attacker would be authenticated as the previously logged in user. It is recommended that the Nextcloud Server is upgraded to 25.0.6 or 26.0.1.
CVE-2023-32319
Nextcloud server is an open source personal cloud implementation. Miss ...
CVE-2023-32318
Nextcloud server provides a home for data. A regression in the session ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2023-35171 NextCloud Server and NextCloud Enterprise Server provide file storage ... | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
| CVE-2023-35927 NextCloud Server and NextCloud Enterprise Server provide file storage ... | CVSS3: 8.1 | 1% Низкий | больше 3 лет назад |
| CVE-2023-35172 NextCloud Server and NextCloud Enterprise Server provide file storage ... | CVSS3: 9.1 | 1% Низкий | больше 3 лет назад |
| CVE-2023-35928 Nextcloud Server is a space for data storage on Nextcloud, a self-host ... | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-32320 Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the amount of faulty requests succeeded the limit by the time the response was sent to the client. This allowed someone to send as many requests the server could handle in parallel to bruteforce protected details instead of the configured limit, default 8. Nextcloud Server versions 25.0.7 and 26.0.2 and Nextcloud Enterprise Server versions 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7 and 26.0.2 contain patches for this issue. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2023-32320 Nextcloud Server is a data storage system for Nextcloud, a self-hosted ... | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2023-32319 Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header allowed to brute-force user credentials when the provided user name was not an email address. Users from version 24.0.0 onward are affected. This issue has been addressed in releases 24.0.11, 25.0.5 and 26.0.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
| CVE-2023-32318 Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session on logout if cookies were not cleared manually. After successfully authenticating with any other account the previous session would be continued and the attacker would be authenticated as the previously logged in user. It is recommended that the Nextcloud Server is upgraded to 25.0.6 or 26.0.1. | CVSS3: 6.7 | 0% Низкий | больше 3 лет назад |
| CVE-2023-32319 Nextcloud server is an open source personal cloud implementation. Miss ... | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
| CVE-2023-32318 Nextcloud server provides a home for data. A regression in the session ... | CVSS3: 6.7 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу