What’s Vulnerable › Products

nextcloud Richdocuments vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your nextcloud Richdocuments version is affected

Latest nextcloud Richdocuments vulnerabilities

• CVE-2023-28645 — Secure view can be bypassed by using internal API endpoint in Nextcloud richdocuments (CVSS 6.5)
• CVE-2023-25159 — Nextcloud Server previews are accessible without a watermark (CVSS 5.3)
• CVE-2023-25150 — Document content of files can be obtained through Collabora for files of other users (CVSS 5.7)
• CVE-2022-31024 — Federated editing allows iframing remote servers by default in richdocuments (CVSS 6.5)
• CVE-2021-39223 — File path disclosure of shared files in Richdocuments application (CVSS 5.3)
• CVE-2021-37629 — Lack of ratelimit on Richdocuments OCS endpoint in nextcloud (CVSS 5.3)
• CVE-2021-37628 — File Drop can be bypassed using Richdocuments app in nextcloud (CVSS 7.5)
• CVE-2021-32748 — WOPI API not protected by credentials/IP check (CVSS 4.3)