Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| nextcloud | nextcloud server | 30.0.0 – < 30.0.9 | |
| nextcloud | security-advisories | >= 32.0.0beta1, < 32.0.1, < 31.0.9 |
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* ≥ 30.0.0 < 30.0.9cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 30.0.0 < 30.0.9cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* ≥ 31.0.0 < 31.0.1cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* ≥ 31.0.0 < 31.0.1Nuestro sensor honeypot gratuito y de código abierto espera en puertos que su servidor no usa y reporta a una lista compartida los escáneres y atacantes que se conectan.