Nextcloud 17 suffers from multiple cross site request forgery vulnerabilities.
b613cc280057db8886536325e5bf276d
NextCloud and OwnCloud suffer from a cross site scripting vulnerability in their error pages. OwnCloud versions 9.1.5 and below are affected. NextCloud versions prior to 11.0.3, 10.0.5, and 9.0.58 are affected.
90a88078574ed841e7ddfd88ba6d1a4e
The password reset form in Nextcloud and Owncloud suffers from a user enumeration vulnerability.
a5f89c6d6404348d70fce06faf2ee572