Security Intel Hub 29+

Nextcloud System Address Book Information Disclosure Fix

Nextcloud Approval Privilege Escalation via File ID (CVE-2025-66515)

Nextcloud Tables Information Disclosure Vulnerability (CVE-2025-66553)

Nextcloud Contacts Search Information Disclosure via Missing Access Control (CVE-2025-66510)

Nextcloud user_saml Open Redirect via RelayState (CVE-2024-22400)

Nextcloud Disabled Shares Allow Download via Preview Images (CVE-2022-41970)

Nextcloud Tables Local File Inclusion via PhpSpreadsheet (CVE-2025-58051)

### Critical Vulnerability Information #### Vulnerability Title - **Tables app allowed to include local file via PhpSpreadsheet when importing a table** #### Severity - **Severity**: Moderate (6.5/10)…

Nextcloud CVE-2025-47794 Insecure Temporary File Creation Vulnerability

### Critical Vulnerability Information #### Vulnerability Title - **Insecure temporary file creation, race with write access and permission** #### Severity - **Severity**: Low (2.6 / 10) #### Affected…

Nextcloud Groupfolders Quota Bypass via Attachment (CVE-2025-47793)

### Critical Vulnerability Information #### Vulnerability Title - **Bypass group folder quota limit using attachment in text file** #### Severity - **Moderate** - **CVSS v3 base metrics**: 4.3/10 ####…

Nextcloud CVE-2025-47791: Unrate-limited endpoint allows SSRF

### Critical Vulnerability Information #### Vulnerability Title - **Test remote endpoint is not rate limited** #### Severity - **Level**: Moderate - **CVSS v3 Base Metrics**: - Attack Vector: Adjacent…

Nextcloud Session Timeout Bypasses 2FA (Moderate Severity)

### Key Information #### Vulnerability Title - **Second factor not requested after session timeout** #### Severity - **Moderate** - CVSS v3 base metrics: 6.4 / 10 #### Affected Scope - **Package**: Se…

Nextcloud External Storage Global Credentials Leakage

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. **Vulnerability Description**: - **Title**: Global credentials of external storages are sent bac…

Nextcloud Background Job Hash Collision Vulnerability (CVE-2024-52521)

### Key Information #### Vulnerability Description - **Title**: Potential hash collision for background jobs could skip queuing them - **Publisher**: nickvergessen - **Vulnerability ID**: GHSA-2q6f-gj…

Nextcloud Background Job Argument Hashing Upgraded from MD5 to SHA256

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. **Code Changes**: - File: `core/Migrations/Version28000Date20240828142927.php` - Code modificatio…

Nextcloud Attachments Folder Accessible on Password Protected Shares

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. **Vulnerability Description**: - **Title**: Attachments folder for Text app is accessible on "Fi…

Nextcloud Tables Information Disclosure Vulnerability (GHSA-rgvc-xr2w-qq45)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. **Vulnerability Description**: - **Vulnerability Name**: Share information of Tables app is not …

Nextcloud Client-Side Encryption Signature Validation Bypass Fix

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. **Code Changes**: - Changes were made in the files `src/libsync/discoveryphase.cpp`, `src/libsyn…

Nextcloud User Password Cleartext in Memory Vulnerability (GHSA-w7v5-mgxm-v6gm)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. **Vulnerability Description**: - **Vulnerability Name**: User password is available in memory of…