FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Nextcloud -- multiple vulnerabilities

Affected packages
nextcloud < 18.0.4

Details

VuXML ID afa018d9-8557-11ea-a5e2-d4c9ef517024
Discovery 2020-03-18
Entry 2020-04-23

Nextcloud reports:

XSS in Files PDF viewer (NC-SA-2020-019)

Missing ownership check on remote wipe endpoint (NC-SA-2020-018)

References

URL https://nextcloud.com/security/advisories/
URL https://nextcloud.com/security/advisory/?id=NC-SA-2020-018
URL https://nextcloud.com/security/advisory/?id=NC-SA-2020-019