Servers and applications
CVE-2023-39960
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and 26.04; as well as Nextcloud Enterprise Server starting with 22.0.0 and prior to 22.2.10.14, 23.0.12.9, 24.0.12.5, 25.0.9, and 26.0.4; missing protection allows an attacker to brute force passwords on the WebDAV API. Nextcloud Server 25.0.9 and…
- Severity
- High 7.5
- Published
- 13 Oct 2023
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 22.2.10.14, 23.0.12.9, 24.0.12.5, 25.0.9, 26.0.4
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server |
|