Nextcloud Server — набор клиент-серверных программ для создания и использования хранилища данных.
Релизный цикл, информация об уязвимостях
График релизов
Количество 440
CVE-2020-8120
A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16. ...
CVE-2020-8119
Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app.
CVE-2020-8119
Improper authorization in Nextcloud server 17.0.0 causes leaking of pr ...
CVE-2020-8118
An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.
CVE-2020-8118
An authenticated server-side request forgery in Nextcloud server 16.0. ...
CVE-2020-8117
Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event.
CVE-2020-8117
Improper preservation of permissions in Nextcloud Server 14.0.3 causes ...
CVE-2019-15624
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.
CVE-2019-15624
Improper Input Validation in Nextcloud Server 15.0.7 allows group admi ...
CVE-2019-15623
Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2020-8120 A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16. ... | CVSS3: 6.1 | 0% Низкий | около 6 лет назад |
 | CVE-2020-8119 Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app. | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2020-8119 Improper authorization in Nextcloud server 17.0.0 causes leaking of pr ... | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2020-8118 An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application. | CVSS3: 5 | 1% Низкий | около 6 лет назад |
| CVE-2020-8118 An authenticated server-side request forgery in Nextcloud server 16.0. ... | CVSS3: 5 | 1% Низкий | около 6 лет назад |
| CVE-2020-8117 Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event. | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2020-8117 Improper preservation of permissions in Nextcloud Server 14.0.3 causes ... | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2019-15624 Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders. | CVSS3: 4.9 | 0% Низкий | около 6 лет назад |
| CVE-2019-15624 Improper Input Validation in Nextcloud Server 15.0.7 allows group admi ... | CVSS3: 4.9 | 0% Низкий | около 6 лет назад |
| CVE-2019-15623 Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled. | CVSS3: 5.3 | 0% Низкий | около 6 лет назад |
Уязвимостей на страницу