Nextcloud: >> Nextcloud Server >> 19.0.13.9 Security Vulnerabilities
A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.
CVSS Score
7.5
EPSS Score
0.005
Published
2021-01-26
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on.
CVSS Score
4.4
EPSS Score
0.0
Published
2020-11-16
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys.
CVSS Score
8.1
EPSS Score
0.001
Published
2020-11-16
Page 4