Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfully providing the user credentials. It is recommended that the Nextcloud Server is upgraded to 26.0.13, 27.1.8 or 28.0.4 and Nextcloud Enterprise Server is upgraded to 21.0.9.17, 22.2.10.22, 23.0.12.17, 24.0.12.13, 25.0.13.8, 26.0.13, 27.1.8 or 28.0.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LNextcloud Server
APPNextcloud21.0.0 β 21.0.9.17 (bez)22.0.0 β 22.2.10.22 (bez)23.0.0 β 23.0.12.17 (bez)24.0.0 β 24.0.12.13 (bez)25.0.0 β 25.0.13.8 (bez)26.0.0 β 26.0.13 (bez)27.0.0 β 27.1.8 (bez)28.0.0 β 28.0.4 (bez)
Related vulnerabilities
Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation ...
Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews fo...
Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion...
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before...
Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions co...