CVE-2021-32680
12.07.2021, 14:15
Nextcloud Server is a Nextcloud package that handles data storage. In versions priot to 19.0.13, 20.0.11, and 21.0.3, Nextcloud Server audit logging functionality wasn't properly logging events for the unsetting of a share expiration date. This event is supposed to be logged. This issue is patched in versions 19.0.13, 20.0.11, and 21.0.3.Enginsight
| Vendor | Product | Version |
|---|---|---|
| nextcloud | nextcloud_server | 𝑥 < 19.0.13 |
| nextcloud | nextcloud_server | 20.0.0 ≤ 𝑥 < 20.0.11 |
| nextcloud | nextcloud_server | 21.0.0 ≤ 𝑥 < 21.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References