PIN bypass in PassCodeActivity via back button Analysed #3625210 Valid Authentication Medium 2026-06-07 $150 101 Stored XSS Vulnerability via SVG File Analysed #3357808 Valid Cross-site Scripting Medium 2025-12-05 $150 79 CSRF protection on OIDC login is broken Analysed #1878381 Valid Cross-Site Request Forgery Medium 2023-04-04 $500 77 Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet Library Analysed #3249624 Valid File and Path Handling Medium 2025-10-16 – 63 Notes app can be tricked into using a received share created before the user logged in Analysed #2254151 Valid Input Validation and Logic Medium 2024-06-19 – 49 Mail stored HTML injection in subject text Analysed #3357036 Valid No weakness recorded Medium 2026-02-12 – 48 User can copy locked folders and gain access to the contents Analysed #2447316 Valid Access Control Medium 2024-11-16 $500 44 Path traversal allows tricking the Talk Android app into writing files into it's root directory Analysed #1997029 Valid File and Path Handling Medium 2023-08-14 – 43 admin_audit does not log actions on files in a group folder Analysed #2890071 Valid Other weaknesses Medium 2025-12-05 – 38 DNS pin middleware can be tricked into DNS rebinding allowing SSRF Analysed #2115212 Valid Server-Side Request Forgery Medium 2024-01-01 – 38 Incomplete sanitization in SVG preview provider Analysed #2484499 Valid Information Disclosure Medium 2024-12-15 $250 34 Brute force protection allows to send more requests than intended Analysed #1918525 Valid Authentication Medium 2023-07-13 $500 34 Ability to read any emails through IDOR on Nextcloud Mail Analysed #1784681 Valid Insecure Direct Object Reference Medium 2023-04-12 – 34 SSRF via filter bypass due to lax checking on IPs Analysed #1702864 Valid Server-Side Request Forgery Medium 2023-02-10 $250 33 OAuth2 client_secret stored in plain text in the database Analysed #1994324 Valid Cryptography Medium 2023-11-15 $100 31 Ability to by-pass second factor Analysed #2419776 Valid Authentication Medium 2024-07-14 $1,000 29 ID4ME does not validate signature or expiration Analysed #1878391 Valid Cryptography Medium 2024-07-14 $750 29 External storage - global credentials returned to the client side in plaintext Analysed #2554079 Valid Information Disclosure Medium 2024-11-21 – 28 X-E2EE-SIGNATURE verification can be bypassed, leading to loss of confidentiality of end-to-end encrypted files Analysed #2597504 Valid Cryptography Medium 2024-12-15 – 27 Event create can create attachments that link to other websites Analysed #2457588 Valid Open Redirect Medium 2024-07-14 $250 25 Nextcloud Tables app - inserting rows to an arbitrary table possible Analysed #2671404 Valid No weakness recorded Medium 2024-11-17 – 24 Re-emergence of Security Vulnerability in Nextcloud Version 28 Previously Fixed in 25.0.4 Analysed #2290680 Valid Access Control Medium 2024-07-14 $500 24