-
Notifications
You must be signed in to change notification settings - Fork 14
Security: nextcloud/security-advisories
Security Navigation
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Session Fixation in Nextcloud TalkGHSA-p6h7-84v4-827r published
Jun 15, 2021 by LukasReschkeLow -
Nextcloud deck sharee search leaks searches to lookupserver by defaultGHSA-h8f6-wg82-6p7r published
Jun 1, 2021 by LukasReschkeLow -
Default Nextcloud Server and iOS Client leak sharee searches to NextcloudGHSA-m7w4-cvjr-76mh published
Jun 1, 2021 by LukasReschkeLow -
Files Drop public link can be added as federated shareGHSA-grph-cm44-p3jv published
Jun 1, 2021 by LukasReschkeLow -
Attacker can obtain write access to any federated share/public linkGHSA-jf9h-v24c-22g5 published
Jun 1, 2021 by LukasReschkeHigh -
Default settings leak federated cloud ID to lookup server of all usersGHSA-396j-vqpr-qg45 published
Jun 1, 2021 by LukasReschkeLow -
End to end encryption folder locking is not properly protectedGHSA-3829-45wm-ww36 published
Jun 1, 2021 by LukasReschkeLow -
Missing permission check on email metadata retrievalGHSA-mxx2-6rg9-v2vc published
Jun 1, 2021 by LukasReschkeHigh -
Default Nextcloud Server and Android Client leak sharee searches to NextcloudGHSA-22v9-q3r6-x7cj published
Jun 1, 2021 by LukasReschkeLow -
SSL certificate was not validated in Provider Registration FlowGHSA-qpgp-vf4p-wcw5 published
Jun 1, 2021 by LukasReschkeModerate