Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may read temporary files from Nextcloud running with a different user account, or run a symlink attack. Nextcloud Server versions 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1 fix the issue. No known workarounds are available.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| nextcloud | nextcloud server | 26.0.0 – < 26.0.13.13 | |
| nextcloud | security-advisories | >= 26.0.0, < 26.0.13.13, >= 27.0.0, < 27.1.11.13, >= 28.0.0, < 28.0.14.4, >= 29.0.0, < 29.0.13, >= 30.0.0, < 30.0.7, >= 31.0.0, < 31.0.1 |
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 26.0.0 < 26.0.13.13cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 27.0.0 < 27.1.11.13cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 28.0.0 < 28.0.14.4cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* ≥ 29.0.0 < 29.0.13cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 29.0.0 < 29.0.13cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* ≥ 30.0.0 < 30.0.7cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 30.0.0 < 30.0.7cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* ≥ 31.0.0 < 31.0.1cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 31.0.0 < 31.0.1Nuestro sensor honeypot gratuito y de código abierto espera en puertos que su servidor no usa y reporta a una lista compartida los escáneres y atacantes que se conectan.