UpHeron
All vulnerabilities

Servers and applications

CVE-2025-47790

Nextcloud Server is a self hosted personal cloud system. Nextcloud Server prior to 29.0.15, 30.0.9, and 31.0.3 and Nextcloud Enterprise Server prior to 26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9, and 31.0.3 have a bug with session handling. The bug caused skipping the second factor confirmation after a successful login with the username and password when the server was configured with…

Severity
Medium 6.4
Published
16 May 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9, 31.0.3
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • From 26.0.0 before 26.0.13.15
  • From 27.0.0 before 27.1.11.15
  • From 28.0.0 before 28.0.14.6
  • From 29.0.0 before 29.0.15
  • From 30.0.0 before 30.0.9
  • From 31.0.0 before 31.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-47790
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-47790