https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 07:12:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02262 bdu:2023-02262 https://cve.radiocsirt.org/vuln/bdu:2023-02262 https://cve.radiocsirt.org/vuln/euvd-2026-214735 EUVD-2026-214735 https://cve.radiocsirt.org/vuln/euvd-2026-214735 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26482 <p>Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defined scripts, in order to generate PDFs, invoking webhooks or running scripts on the server. Due to this combination depending on the available apps the issue can result in a RCE at the end. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. Users unable to upgrade should disable app `workflow_scripts` and `workflow_pdf_converter` as a mitigation.</p> <p>Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defined scripts, in order to generate PDFs, invoking webhooks or running scripts on the server. Due to this combination depending on the available apps the issue can result in a RCE at the end. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. Users unable to upgrade should disable app `workflow_scripts` and `workflow_pdf_converter` as a mitigation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26482 https://cve.radiocsirt.org/vuln/gsd-2023-26482 gsd-2023-26482 https://cve.radiocsirt.org/vuln/gsd-2023-26482 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0824 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0824