File and Path Handling

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.CVE-2020-8227Nextcloud · 26% likely

   CWE-221 bounty report

2. File Traversal affecting SVG files on Nextcloud ServerCVE-2021-41178nextcloud · CVSS 8.8 · 1.8% likely

   CWE-23

3. XSS in TalkCVE-2021-39222nextcloud · CVSS 6.4 · 1.1% likely

   CWE-434

4. Unrestricted filenames for logo or favicon as admin in the theming settings in nextcloud serverCVE-2023-28833nextcloud · CVSS 2.4 · 0.8% likely

   CWE-221 bounty report

5. XSS in ContactsCVE-2021-39221nextcloud · CVSS 6.4 · 0.5% likely

   CWE-434

6. Directory traversal in Nextcloud serverCVE-2023-25579nextcloud · CVSS 6 · 0.5% likely

   CWE-22

7. Untrusted Search Path in Nextcloud Desktop ClientCVE-2021-37617nextcloud · CVSS 7.3 · 0.5% likely

   CWE-426

8. Nextcloud: Limited path traversal via template API if using `{lang}` in configCVE-2026-45279nextcloud · CVSS 4.4 · 0.4% likely

   CWE-22

9. Path traversal allows tricking the Talk Android app into writing files into it's root directoryCVE-2023-39957nextcloud · CVSS 7.2 · 0.4% likely

   CWE-221 bounty report

10. Access to internal files of the Nextcloud Android appCVE-2022-39210nextcloud · CVSS 3.2 · 0.3% likely

    CWE-221 bounty report

11. Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files shareCVE-2026-45543nextcloud · CVSS 5.3 · 0.3% likely

    CWE-552

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.