All vulnerabilities

Servers and applications

CVE-2023-35171

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supply a URL that redirects an unsuspecting victim from a legitimate domain to an attacker's site. Nextcloud Server and Nextcloud Enterprise Server 26.0.2 contain a patch for this issue. No known…

Severity
Medium 6.1
Published
23 Jun 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
26.0.2
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • From 26.0.0 before 26.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-35171
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-35171