受影响的版本系列
已知漏洞
| CVE | 标题 | 受影响版本 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|---|
| CVE-2026-82984 | When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the... | ≥ 32.0.0 ≤ 33.0.0 | 4.3 | — | 2026-10-28 | |
| CVE-2026-77167 | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database... | ≥ 22.0.0 ≤ 34.0.0 | 7.5 | — | 2026-10-28 | |
| CVE-2026-77172 | App passwords were allowed to bypass password confirmation on sensitive endpoints. | ≥ 32.0.0 ≤ 34.0.0 | 5.3 | — | 2026-10-28 | |
| CVE-2026-77165 | File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked wit... | ≥ 32.0.0 ≤ 34.0.0 | 6.5 | — | 2026-09-22 | |
| CVE-2026-82985 | The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSo... | ≥ 32.0.0 < 32.0.0 | 6.5 | — | 2026-09-18 | |
| CVE-2026-77164 | Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the re... | ≥ 31.0.0 ≤ 32.0.0 | 6.2 | — | 2026-09-18 | |
| CVE-2026-68493 | After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of me... | ≥ 32.0.0 ≤ 34.0.0 | 3.1 | — | 2026-09-18 | |
| CVE-2026-45810 | Nextcloud: Propfind requests for file comments allowed to load comments for other files | * | 6.8 | — | 2026-06-02 | |
| CVE-2026-45691 | Nextcloud: Bypass of second factor authentication on DAV endpoints | * | 5.9 | — | 2026-06-02 | |
| CVE-2026-45690 | Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay | * | 5.9 | — | 2026-06-02 | |
| CVE-2026-45281 | Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update | * | 8.1 | — | 2026-06-02 | |
| CVE-2026-45279 | Nextcloud: Limited path traversal via template API if using `{lang}` in config | * | 4.4 | — | 2026-06-02 | |
| CVE-2026-45157 | Nextcloud: Valid share tokens allow to access tempory upload files of share owner | * | 6.3 | — | 2026-06-02 | |
| CVE-2025-66552 | Nextcloud Server admin_audit does not log all actions on files in groupfolders | * | 4.3 | — | 2025-12-06 | |
| CVE-2025-66547 | Nextcloud Server users can modify tags on files that do not belong to them | * | 4.3 | — | 2025-12-06 | |
| CVE-2025-66510 | Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their con... | * | 4.5 | — | 2025-12-06 | |
| CVE-2025-47794 | Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission | * | 2.6 | — | 2025-05-16 | |
| CVE-2025-47793 | Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in tex... | * | 4.3 | — | 2025-05-16 | |
| CVE-2025-47791 | Nextcloud Server's test remote endpoint is not rate limited | * | 4.3 | — | 2025-05-16 | |
| CVE-2025-47790 | Nextcloud Server doesn't request second factor after session timeout | * | 6.4 | — | 2025-05-16 | |
| CVE-2024-52514 | Nextcloud Server allows users to copy folder that contain files that are blocked by the files access control | * | 4.1 | — | 2024-11-16 | |
| CVE-2024-52515 | Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews | * | 5.7 | — | 2024-11-16 | |
| CVE-2024-52516 | Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed... | * | 3.0 | — | 2024-11-16 | |
| CVE-2024-52517 | Nextcloud Server's global credentials of external storages are sent back to the frontend | * | 4.6 | — | 2024-11-16 | |
| CVE-2024-52518 | Nextcloud Server is missing password confirmation when changing external storage options | * | 4.4 | — | 2024-11-16 | |
| CVE-2024-52519 | Nextcloud Server's OAuth2 client secrets were stored in a recoverable way | * | 2.7 | — | 2024-11-16 | |
| CVE-2024-52520 | Nextcloud Server's link reference provider can be tricked into downloading bigger files than intended | * | 5.7 | — | 2024-11-16 | |
| CVE-2024-52521 | Nextcloud Server has a potential hash collision for background jobs could skip queuing them | * | 2.6 | — | 2024-11-16 | |
| CVE-2024-52523 | Nextcloud Server Custom defined credentials of external storages are sent back to the frontend | * | 4.6 | — | 2024-11-16 | |
| CVE-2024-52525 | Nextcloud Server User password is available in memory of the PHP process | * | 1.8 | — | 2024-11-16 | |
| CVE-2024-37887 | Nextcloud Server's events information leaked with shared calendars on recurrence exceptions | * | 3.5 | — | 2024-06-15 | |
| CVE-2024-37884 | Nextcloud Server's users can delete old versions of read-only shared files | * | 3.5 | — | 2024-06-15 | |
| CVE-2024-37882 | Nextcloud Server can reshare read&share only folder with more permissions | * | 8.1 | — | 2024-06-15 | |
| CVE-2024-37315 | Nextcloud Server's read-only users can restore old versions | * | 3.5 | — | 2024-06-15 | |
| CVE-2024-37313 | Nextcloud server allows the by-pass the second factor | * | 7.3 | — | 2024-06-14 | |
| CVE-2024-22403 | OAuth2 authorization codes are valid indefinetly in Nextcloud server | * | 3.0 | — | 2024-01-19 | |
| CVE-2023-49792 | Bruteforce protection can be bypassed with misconfigured proxy | * | 5.3 | — | 2023-12-23 | |
| CVE-2023-49791 | Workflows do not require password confirmation on API level | * | 5.4 | — | 2023-12-23 | |
| CVE-2023-48306 | Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF | * | 5.0 | — | 2023-11-22 | |
| CVE-2023-48305 | Nextcloud Server user_ldap app logs user passwords in the log file on level debug | * | 4.2 | — | 2023-11-22 | |
| CVE-2023-48304 | Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user | * | 4.3 | — | 2023-11-22 | |
| CVE-2023-48303 | Nextcloud Server admins can change authentication details of user configured external storage | * | 2.4 | — | 2023-11-22 | |
| CVE-2023-48239 | Nextcloud Server users can make external storage mount points inaccessible for other users | * | 8.5 | — | 2023-11-22 | |
| CVE-2023-45148 | Rate limiter not working reliable when Memcached is installed in Nextcloud | * | 4.3 | — | 2023-10-17 | |
| CVE-2023-45151 | OAuth2 client_secret stored in plain text in the Nextcloud database | * | 6.5 | — | 2023-10-17 | |
| CVE-2023-39960 | Nextcloud Server has improper restriction of excessive authentication attempts on WebDAV endpoint | * | 5.0 | — | 2023-10-13 | |
| CVE-2023-39963 | Missing password confirmation when creating app passwords | * | 8.1 | — | 2023-08-11 | |
| CVE-2023-39962 | Users can delete external storage mount points | * | 7.7 | — | 2023-08-11 | |
| CVE-2023-39959 | Existence of calendars and address books can be checked by unauthenticated users | * | 3.5 | — | 2023-08-11 | |
| CVE-2023-39958 | Missing brute force protection on password reset token OAuth2 API controller | * | 5.8 | — | 2023-08-11 | |
| CVE-2023-39952 | Advanced permissions not respected when copying entire group folders | * | 6.5 | — | 2023-08-10 | |
| CVE-2023-35928 | Nextcloud user scoped external storage can be used to gather credentials of other users | * | 8.5 | — | 2023-06-24 | |
| CVE-2023-35927 | Nextcloud system addressbooks can be modified by malicious trusted server | * | 7.6 | — | 2023-06-24 | |
| CVE-2023-35172 | Nextcloud Server password reset endpoint is not brute force protected | * | 8.7 | — | 2023-06-24 | |
| CVE-2023-35171 | Nextcloud Server vulnerable to open redirect on "Unsupported browser" warning | * | 4.1 | — | 2023-06-24 | |
| CVE-2023-32320 | Nextcloud Server's brute force protection allows someone to send more requests than intended | * | 8.7 | — | 2023-06-23 | |
| CVE-2023-32319 | Basic auth header on WebDAV requests is not brute-force protected in Nextcloud | * | 8.1 | — | 2023-05-27 | |
| CVE-2023-28847 | Nextcloud Server missing brute force protection for passwords of password protected share links | * | 3.1 | — | 2023-04-26 | |
| CVE-2023-30539 | Users can set up workflows using restricted and invisible system tags in Nextcloud | * | 6.5 | — | 2023-04-18 | |
| CVE-2023-28834 | Full path of data directory exposed to Nextcloud server users | * | 3.5 | — | 2023-04-04 |
数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。