Nextcloud Server — набор клиент-серверных программ для создания и использования хранилища данных.
Релизный цикл, информация об уязвимостях
График релизов
Количество 456
CVE-2023-48301
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles.
CVE-2023-48303
Nextcloud Server provides data storage for Nextcloud, an open source c ...
CVE-2023-48239
Nextcloud Server provides data storage for Nextcloud, an open source c ...
CVE-2023-48301
Nextcloud Server provides data storage for Nextcloud, an open source c ...
CVE-2023-48302
Nextcloud Server provides data storage for Nextcloud, an open source c ...
CVE-2023-48306
Nextcloud Server provides data storage for Nextcloud, an open source c ...
CVE-2023-48305
Nextcloud Server provides data storage for Nextcloud, an open source c ...
CVE-2023-48304
Nextcloud Server provides data storage for Nextcloud, an open source c ...
CVE-2023-45148
Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgrade should change their config setting `memcache.distributed` to `\OC\Memcache\Redis` and install Redis instead of Memcached.
CVE-2023-45151
Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their Nextcloud Server to version 25.0.8, 26.0.3 or 27.0.1. There are no known workarounds for this vulnerability.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2023-48301 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles. | CVSS3: 5.4 | 1% Низкий | почти 3 года назад | |
CVE-2023-48303 Nextcloud Server provides data storage for Nextcloud, an open source c ... | CVSS3: 2.7 | 1% Низкий | почти 3 года назад | |
CVE-2023-48239 Nextcloud Server provides data storage for Nextcloud, an open source c ... | CVSS3: 7.1 | 1% Низкий | почти 3 года назад | |
CVE-2023-48301 Nextcloud Server provides data storage for Nextcloud, an open source c ... | CVSS3: 5.4 | 1% Низкий | почти 3 года назад | |
CVE-2023-48302 Nextcloud Server provides data storage for Nextcloud, an open source c ... | CVSS3: 5.4 | 1% Низкий | почти 3 года назад | |
CVE-2023-48306 Nextcloud Server provides data storage for Nextcloud, an open source c ... | CVSS3: 9.8 | 1% Низкий | почти 3 года назад | |
CVE-2023-48305 Nextcloud Server provides data storage for Nextcloud, an open source c ... | CVSS3: 4.4 | 0% Низкий | почти 3 года назад | |
CVE-2023-48304 Nextcloud Server provides data storage for Nextcloud, an open source c ... | CVSS3: 4.3 | 1% Низкий | почти 3 года назад | |
CVE-2023-45148 Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgrade should change their config setting `memcache.distributed` to `\OC\Memcache\Redis` and install Redis instead of Memcached. | CVSS3: 4.3 | 1% Низкий | около 3 лет назад | |
CVE-2023-45151 Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their Nextcloud Server to version 25.0.8, 26.0.3 or 27.0.1. There are no known workarounds for this vulnerability. | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
Уязвимостей на страницу