Security Advisories · nextcloud/security-advisories · GitHub

Security Advisories

View information about security vulnerabilities from this repository's maintainers.

Malicious Android application can crash the Nextcloud Android Client
GHSA-h2gm-m374-99vc published Jun 17, 2021 by LukasReschke

Low
Malicious Android app could access Shared Preferences of the Nextcloud Android client
GHSA-25m9-cf6c-qf2c published Jun 17, 2021 by LukasReschke

Low
Nextcloud Talk not properly disassociating users from chats after account deletion
GHSA-xv6f-344w-895c published Jul 12, 2021 by LukasReschke

Moderate
Application specific tokens can change their own scope
GHSA-48m7-7r2r-838r published Jul 12, 2021 by LukasReschke

High
Audit log is not properly logging unsetting of share expiration date
GHSA-fxpq-wq7c-vppf published Jul 12, 2021 by LukasReschke

Low
Filenames not escaped by default in controllers using DownloadResponse
GHSA-3hjp-26x8-mhf6 published Jul 12, 2021 by LukasReschke

Low
Ratelimit not applied on OCS API responses
GHSA-48rx-3gmf-g74j published Jul 12, 2021 by LukasReschke

Low
Sensitive data may not be removed from storage on account removal
GHSA-g5gf-rmhm-wpxw published Jun 8, 2021 by LukasReschke

Low
Malicious user could break user administration page
GHSA-fx62-q47f-f665 published Jun 1, 2021 by LukasReschke

Low
Trusted servers exchange can be triggered by attacker
GHSA-j875-vr2q-h6x6 published Jun 1, 2021 by LukasReschke

Moderate