UpHeron
All vulnerabilities

Servers and applications

CVE-2023-35172

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, an attacker can…

Severity
Critical 9.1
Published
23 Jun 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, 26.0.2
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • From 21.0.0 before 21.0.9.12
  • From 22.0.0 before 22.2.10.12
  • From 23.0.0 before 23.0.12.7
  • From 24.0.0 before 24.0.12.2
  • From 25.0.0 before 25.0.7
  • From 26.0.0 before 26.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-35172
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-35172