CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2021-32734 – File path disclosure of shared files in Nextcloud Text application
https://notcve.org/view.php?id=CVE-2021-32734
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the Nextcloud Text application shipped with Nextcloud Server returned verbatim exception messages to the user. This could result in a full path disclosure on shared files. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. As a workaround, one may disable the Nextcloud Text application in Nextcloud Server app settings. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6hf5-c2c4-2526 https://github.com/nextcloud/text/pull/1695 https://hackerone.com/reports/1246721 https://security.gentoo.org/glsa/202208-17 • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0CVE-2021-32733 – XSS in Nextcloud Text application
https://notcve.org/view.php?id=CVE-2021-32733
Nextcloud Text is a collaborative document editing application that uses Markdown. A cross-site scripting vulnerability is present in versions prior to 19.0.13, 20.0.11, and 21.0.3. The Nextcloud Text application shipped with Nextcloud server used a `text/html` Content-Type when serving files to users. Due the strict Content-Security-Policy shipped with Nextcloud, this issue is not exploitable on modern browsers supporting Content-Security-Policy. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x4w3-jhcr-57pq https://github.com/nextcloud/text/pull/1689 https://hackerone.com/reports/1241460 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2021-32727 – End-to-end encryption device setup did not verify public key
https://notcve.org/view.php?id=CVE-2021-32727
Nextcloud Android Client is the Android client for Nextcloud. Clients using the Nextcloud end-to-end encryption feature download the public and private key via an API endpoint. In versions prior to 3.16.1, the Nextcloud Android client skipped a step that involved the client checking if a private key belonged to a previously downloaded public certificate. If the Nextcloud instance served a malicious public key, the data would be encrypted for this key and thus could be accessible to a malicious actor. The vulnerability is patched in version 3.16.1. • https://github.com/nextcloud/android/pull/8438 https://github.com/nextcloud/end_to_end_encryption_rfc/blob/7f002996397faefb664019a97ebb0a1e210f64f0/RFC.md#further-devices https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5v33-r9cm-7736 https://hackerone.com/reports/1189162 • CWE-295: Improper Certificate Validation •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-32726 – Webauthn tokens not removed after user has been deleted
https://notcve.org/view.php?id=CVE-2021-32726
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted after a user has been deleted. If a victim reused an earlier used username, the previous user could gain access to their account. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. There are no known workarounds. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6qr9-c846-j8mg https://github.com/nextcloud/server/pull/27532 https://hackerone.com/reports/1202590 https://security.gentoo.org/glsa/202208-17 • CWE-287: Improper Authentication CWE-708: Incorrect Ownership Assignment •
CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2021-32725 – Default share permissions not respected for federated reshares
https://notcve.org/view.php?id=CVE-2021-32725
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, default share permissions were not being respected for federated reshares of files and folders. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. There are no known workarounds. Nextcloud Server es un paquete de Nextcloud que maneja el almacenamiento de datos. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6f6v-h9x9-jj4v https://github.com/nextcloud/server/pull/26946 https://hackerone.com/reports/1178320 https://security.gentoo.org/glsa/202208-17 • CWE-276: Incorrect Default Permissions CWE-277: Insecure Inherited Permissions •