https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:23:57 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0159 certfr-2023-avi-0159 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0159 https://cve.radiocsirt.org/vuln/euvd-2026-221523 EUVD-2026-221523 https://cve.radiocsirt.org/vuln/euvd-2026-221523 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25579 <p>Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and normalizing the string in the wrong order. The function is used in the `newFile()` and `newFolder()` items, which may allow to creation of paths outside of ones own space and overwriting data from other users with crafted paths. This issue has been addressed in versions 25.0.2, 24.0.8, and 23.0.12. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p>Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and normalizing the string in the wrong order. The function is used in the `newFile()` and `newFolder()` items, which may allow to creation of paths outside of ones own space and overwriting data from other users with crafted paths. This issue has been addressed in versions 25.0.2, 24.0.8, and 23.0.12. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25579 https://cve.radiocsirt.org/vuln/gsd-2023-25579 gsd-2023-25579 https://cve.radiocsirt.org/vuln/gsd-2023-25579 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0083-1 <p>Security update for nextcloud</p> <p>Security update for nextcloud</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0083-1