Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| nextcloud | nextcloud server | 30.0.0 – < 30.0.9 | |
| nextcloud | security-advisories | >= 32.0.0beta1, < 32.0.1, < 31.0.9 |
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* ≥ 30.0.0 < 30.0.9cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 30.0.0 < 30.0.9cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* ≥ 31.0.0 < 31.0.1cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 31.0.0 < 31.0.1Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.