Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Nextcloud Server

Nextcloud Server — набор клиент-серверных программ для создания и использования хранилища данных.

Релизный цикл, информация об уязвимостях

Продукт: Nextcloud Server
Вендор: nextcloud

График релизов

333435202620272028

Недавние уязвимости Nextcloud Server

Количество 456

nvd логотип

CVE-2023-48301

почти 3 года назад

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2023-48303

почти 3 года назад

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 2.7
EPSS: Низкий
debian логотип

CVE-2023-48239

почти 3 года назад

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 7.1
EPSS: Низкий
debian логотип

CVE-2023-48301

почти 3 года назад

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2023-48302

почти 3 года назад

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2023-48306

почти 3 года назад

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2023-48305

почти 3 года назад

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 4.4
EPSS: Низкий
debian логотип

CVE-2023-48304

почти 3 года назад

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-45148

около 3 лет назад

Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgrade should change their config setting `memcache.distributed` to `\OC\Memcache\Redis` and install Redis instead of Memcached.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-45151

около 3 лет назад

Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their Nextcloud Server to version 25.0.8, 26.0.3 or 27.0.1. There are no known workarounds for this vulnerability.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2023-48301

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles.

CVSS3: 5.4
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-48303

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 2.7
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-48239

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 7.1
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-48301

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 5.4
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-48302

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 5.4
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-48306

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 9.8
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-48305

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 4.4
0%
Низкий
почти 3 года назад
debian логотип
CVE-2023-48304

Nextcloud Server provides data storage for Nextcloud, an open source c ...

CVSS3: 4.3
1%
Низкий
почти 3 года назад
nvd логотип
CVE-2023-45148

Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgrade should change their config setting `memcache.distributed` to `\OC\Memcache\Redis` and install Redis instead of Memcached.

CVSS3: 4.3
1%
Низкий
около 3 лет назад
nvd логотип
CVE-2023-45151

Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their Nextcloud Server to version 25.0.8, 26.0.3 or 27.0.1. There are no known workarounds for this vulnerability.

CVSS3: 8.8
1%
Низкий
около 3 лет назад

Уязвимостей на страницу


Поделиться