Approved changes feed: RSS · Atom

cpe:2.3:a:nextcloud:nextcloud_server:25.0.0:*:*:*:enterprise:*:*:*

part: a version: 25.0.0 update: *

VendorNextcloud (e5ae4298-6932-564f-a40d-08cebea039a5)
ProductNextcloud Server (1b3f7567-9687-57ec-81e9-325dd62e7470)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/nextcloud/server purl2cpe 2026-06-01 10:17:59.043306

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25821 vulnerable 2026-06-03 14:49:34.198732 Nextcloud download permissions can be changed by resharer
MEDIUM (5.7)
Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improper Access Control. Secure view for internal shares can be circumvented if reshare permissions are also given. This issue is patched in versions 24.0.7 and 25.0.1. No workaround is available.
Published: 2023-02-24T23:39:51.684Z
Updated: 2025-03-10T21:05:57.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41970 vulnerable 2026-06-03 14:48:11.942027 Nextcloud Server's disabled download shares still allow download through preview images
LOW (2.6)
Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through preview images. Images could be downloaded and previews of documents (first page) can be downloaded without being watermarked. Versions 24.0.7 and 25.0.1 contain a fix for this issue. No known workarounds are available.
Published: 2022-12-01T20:54:37.460Z
Updated: 2025-04-23T16:33:19.664Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.