NA - CVE-2024-52515 - Nextcloud Server is a self hosted personal...
Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file referencing paths. If...
NA - CVE-2024-52516 - Nextcloud Server is a self hosted personal...
Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously...
NA - CVE-2024-52517 - Nextcloud Server is a self hosted personal...
Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into the frontend again, allowing to read them in plain...
NA - CVE-2024-52518 - Nextcloud Server is a self hosted personal...
Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or administrator, the attacker would be able to create, change or delete external...
NA - CVE-2024-52519 - Nextcloud Server is a self hosted personal...
Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so that an attacker that got access to a backup of the database and the...
NA - CVE-2024-52520 - Nextcloud Server is a self hosted personal...
Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downloading bigger websites than intended, to find...
NA - CVE-2024-52521 - Nextcloud Server is a self hosted personal...
Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely...