Misconfiguration and Insecure Design

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. Bypass of password requirements when sharing a folder via the Circles app in Nextcloud ServerCVE-2022-29163nextcloud · CVSS 3.5 · 1.1% likely

   CWE-6711 bounty report

2. Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or register…CVE-2019-15611Nextcloud · 1.1% likely

   CWE-6571 bounty report

3. A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.CVE-2020-8133Nextcloud · 0.7% likely

   CWE-6571 bounty report

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.