CVSS: 2.6EPSS: 0%CPEs: 6EXPL: 0CVE-2025-47794 – Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission
https://notcve.org/view.php?id=CVE-2025-47794
16 May 2025 — Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may read temporary files from Nextcloud running with a different user account, or run a symlink attack. Nextcloud Server versions 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1 fix t... • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-q568-2933-gcjq • CWE-284: Improper Access Control •
CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2025-47793 – Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file
https://notcve.org/view.php?id=CVE-2025-47793
16 May 2025 — Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. In Nextcloud Server prior to 30.0.2, 29.0.9, and 28.0.1, Nextcloud Enterprise Server prior to 30.0.2 and 29.0.9, and Nextcloud Groupfolders app prior to 18.0.3, 17.0.5, and 16.0.11, the absence of quota checking on attachments allowed logged-in users to upload files exceeding the group folder quota. Nextcloud Server versions 30.0.2 and 29.0.9, N... • https://github.com/nextcloud/groupfolders/pull/3328 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2025-47792 – Nextcloud Desktop 3rdparty applications can create share links via socket API
https://notcve.org/view.php?id=CVE-2025-47792
16 May 2025 — Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service. Nextcloud Desktop fixes the issue in version 3.15. No known workarounds are available. • https://github.com/nextcloud/desktop/pull/7517 • CWE-284: Improper Access Control •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2025-47791 – Nextcloud Server's test remote endpoint is not rate limited
https://notcve.org/view.php?id=CVE-2025-47791
16 May 2025 — Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 28.0.13, 29.0.10, and 30.0.3 and Nextcloud Enterprise Server prior to 28.0.13, 29.0.10, and 30.0.3, a currently unused endpoint to verify a share recipient was not protected correctly, allowing to proxy requests to another server. The endpoint was removed in Nextcloud Server 28.0.13, 29.0.10, and 30.0.3 and Nextcloud Enterprise Server 28.0.13, 29.0.10, and 30.0.3. No known workarounds are available. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c7vq-m7f8-rx37 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 6.6EPSS: 0%CPEs: 6EXPL: 0CVE-2025-47790 – Nextcloud Server doesn't request second factor after session timeout
https://notcve.org/view.php?id=CVE-2025-47790
16 May 2025 — Nextcloud Server is a self hosted personal cloud system. Nextcloud Server prior to 29.0.15, 30.0.9, and 31.0.3 and Nextcloud Enterprise Server prior to 26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9, and 31.0.3 have a bug with session handling. The bug caused skipping the second factor confirmation after a successful login with the username and password when the server was configured with `remember_login_cookie_lifetime` set to `0`, once the session expired on the page to select the second factor and th... • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9h3w-f3h4-qqrh • CWE-287: Improper Authentication •
CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0CVE-2024-52509 – Nextcloud Mail app does not respect download permissions in shares
https://notcve.org/view.php?id=CVE-2024-52509
15 Nov 2024 — Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly allowed attaching shared files without download permissions as attachments. This allowed users to send them the files to themselves and then downloading it from their mail clients. It is recommended that the Nextcloud Mail is upgraded to 2.2.10, 3.6.2 or 3.7.2. • https://github.com/nextcloud/mail/commit/8d44f1ce44684022aa4e62a3e0462fdadcde6c8b • CWE-284: Improper Access Control •
CVSS: 8.2EPSS: 0%CPEs: 5EXPL: 0CVE-2024-52508 – Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers
https://notcve.org/view.php?id=CVE-2024-52508
15 Nov 2024 — Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like user@example.tld that does not support auto configuration, and an attacker managed to register autoconfig.tld, the used email details would be send to the server of the attacker. It is recommended that the Nextcloud Mail app is upgraded to 1.14.6, 1.15.4, 2.2.11, 3.6.3, 3.7.7 or 4.0.0. • https://github.com/nextcloud/mail/commit/a84c70e15d814dab6f0e8eda71bbaaf48152079b • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 1CVE-2024-52510 – Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty
https://notcve.org/view.php?id=CVE-2024-52510
15 Nov 2024 — The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client did not stop with an error but allowed by-passing the signature validation, if a manipulated server sends an empty initial signature. It is recommended that the Nextcloud Desktop client is upgraded to 3.14.2 or later. • https://github.com/d-xuan/CVE-2024-52510 • CWE-295: Improper Certificate Validation •
CVSS: 4.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-52507 – Share information of the Nextcloud Tables app is not limited to affected users
https://notcve.org/view.php?id=CVE-2024-52507
15 Nov 2024 — Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is shared with which groups and users and the respective permissions was not limited to affected users. It is recommended that the Nextcloud Tables app is upgraded to 0.8.1. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-rgvc-xr2w-qq45 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-52511 – Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables
https://notcve.org/view.php?id=CVE-2024-52511
15 Nov 2024 — Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no access to. It is recommended that the Nextcloud Tables is upgraded to 0.8.0. • https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4qqp-9h2g-7qg7 • CWE-639: Authorization Bypass Through User-Controlled Key •