CVSS: 8.6EPSS: 0%CPEs: 3EXPL: 0CVE-2021-32656 – Trusted servers exchange can be triggered by attacker
https://notcve.org/view.php?id=CVE-2021-32656
Nextcloud Server is a Nextcloud package that handles data storage. A vulnerability in federated share exists in versions prior to 19.0.11, 20.0.10, and 21.0.2. An attacker can gain access to basic information about users of a server by accessing a public link that a legitimate server user added as a federated share. This happens because Nextcloud supports sharing registered users with other Nextcloud servers, which can be done automatically when selecting the "Add server automatically once a federated share was created successfully" setting. The vulnerability is patched in versions 19.0.11, 20.0.10, and 21.0.2 As a workaround, disable "Add server automatically once a federated share was created successfully" in the Nextcloud settings. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j875-vr2q-h6x6 https://hackerone.com/reports/1167853 https://security.gentoo.org/glsa/202208-17 • CWE-284: Improper Access Control •
CVSS: 3.5EPSS: 0%CPEs: 3EXPL: 0CVE-2021-32655 – Files Drop public link can be added as federated share
https://notcve.org/view.php?id=CVE-2021-32655
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to convert a Files Drop link to a federated share. This causes an issue on the UI side of the sharing user. When the sharing user opens the sharing panel and tries to remove the "Create" privileges of this unexpected share, Nextcloud server would silently grant the share read privileges. The vulnerability is patched in versions 19.0.11, 20.0.10 and 21.0.2. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-grph-cm44-p3jv https://hackerone.com/reports/1167929 https://security.gentoo.org/glsa/202208-17 • CWE-241: Improper Handling of Unexpected Data Type •
CVSS: 9.1EPSS: 0%CPEs: 3EXPL: 0CVE-2021-32654 – Attacker can obtain write access to any federated share/public link
https://notcve.org/view.php?id=CVE-2021-32654
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to receive write/read privileges on any Federated File Share. Since public links can be added as federated file share, this can also be exploited on any public link. Users can upgrade to patched versions (19.0.11, 20.0.10 or 21.0.2) or, as a workaround, disable federated file sharing. Nextcloud Server es un paquete de Nextcloud que maneja el almacenamiento de datos. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-jf9h-v24c-22g5 https://hackerone.com/reports/1170024 https://security.gentoo.org/glsa/202208-17 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0CVE-2021-32653 – Default settings leak federated cloud ID to lookup server of all users
https://notcve.org/view.php?id=CVE-2021-32653
Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server versions prior to 19.0.11, 20.0.10, or 21.0.2 send user IDs to the lookup server even if the user has no fields set to published. The vulnerability is patched in versions 19.0.11, 20.0.10, and 21.0.2; no workarounds outside the updates are known to exist. Nextcloud Server es un paquete de Nextcloud que maneja el almacenamiento de datos. Nextcloud Server versiones anteriores 19.0.11, 20.0.10 o 21.0.2, envían los ID de usuario al servidor de búsqueda incluso si el usuario no presenta ningún campo ajustado para ser publicado. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-396j-vqpr-qg45 https://hackerone.com/reports/1173436 https://security.gentoo.org/glsa/202208-17 • CWE-201: Insertion of Sensitive Information Into Sent Data •