Nextcloud Server — набор клиент-серверных программ для создания и использования хранилища данных.

Nextcloud Server before 11.0.3 is vulnerable to an improper session ha ...

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to ...

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping ...

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoof ...

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the ...

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.