UpHeron
All vulnerabilities

Servers and applications

CVE-2021-32733

Nextcloud Text is a collaborative document editing application that uses Markdown. A cross-site scripting vulnerability is present in versions prior to 19.0.13, 20.0.11, and 21.0.3. The Nextcloud Text application shipped with Nextcloud server used a `text/html` Content-Type when serving files to users. Due the strict Content-Security-Policy shipped with Nextcloud, this issue is not exploitable…

Severity
Medium 6.1
Published
12 Jul 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
19.0.13, 20.0.11, 21.0.3
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • Every version before 19.0.13
  • From 20.0.0 before 20.0.11
  • From 21.0.0 before 21.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-32733
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-32733