Sensitive Information Disclosure via Back Button Post Logout on https://apps.nextcloud.com/account/ Analysed #2946927 Valid No weakness recorded Low 2025-03-16 – 113 Stored XSS Vulnerability via SVG File Analysed #3357808 Valid Cross-site Scripting Medium 2025-12-05 $150 79 Directory Listing of publicly available assets Analysed #2311179 Valid Information Disclosure Medium 2025-09-29 – 70 Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet Library Analysed #3249624 Valid File and Path Handling Medium 2025-10-16 – 63 Calendar app allowed booking appointments without the generated token Analysed #3275810 Valid Insecure Direct Object Reference Low 2025-12-05 – 57 Exposing debug.log file leads to server full path disclosure Analysed #2778441 Valid Input Validation and Logic Medium 2025-09-29 – 47 Blind SSRF Vulnerability in Appstore Release Upload Form Analysed #2925666 Valid Access Control Low 2025-01-14 – 43 Email not verified when changing afterwards on apps.nextcloud.com Analysed #2305880 Valid Misconfiguration and Insecure Design Low 2025-09-29 – 42 Approval app allows users to request approval for other users file Analysed #3338748 Valid Authentication Medium 2025-12-05 – 39 Deck app allowed user with "Can share" permission to modify permissions of other non-owners Analysed #3247499 Valid Access Control Medium 2025-12-05 – 38 admin_audit does not log actions on files in a group folder Analysed #2890071 Valid Other weaknesses Medium 2025-12-05 – 38 tabnabbing in roundcube webmail Analysed #3367676 Valid No weakness recorded – 2025-12-24 – 37 Tables app allowed users to view columns metadata information of any table #3138721 Valid Insecure Direct Object Reference Medium 2025-12-05 – 30 Missing ownership check in Tables app allows moving columns into tables of other users Analysed #3137895 Valid Insecure Direct Object Reference Medium 2025-12-05 – 30 Possible to enumerate valid files in password protected shares/files drop shares as well as spam folder with files Analysed #2376909 Valid Information Disclosure Low 2025-02-21 – 29 Participants were able to blindly delete poll drafts of other users by ID Analysed #3247386 Valid Insecure Direct Object Reference Medium 2025-12-05 – 27 [nextcloud/mail] Blind SSRF to Internal Network via "List-Unsubscribe" SMTP Header when allow_local_remote_servers is allowed #2902856 Informative Server-Side Request Forgery Medium 2025-12-23 – 25 Calendar attachments of local files are offered to downloaded Analysed #3112033 Valid Input Validation and Logic Medium 2025-12-05 – 22 Nextcloud Tables v1 Share Enumeration Without Authorization (Regression of CVE-2024-52507) #3334165 Valid Authentication Low 2025-12-05 – 13