Is Nextcloud Server 23.0.10 affected?
Oct 6, 2022 · Release notes ↗
9 known vulnerabilities affect 23.0.10 (highest CVSS 6.0).
Your branch 23 has reached end of life (Dec 31, 2022).
158 newer releases in its track, up to 35.0.2. What changed up to 35.0.2
Vulnerabilities affecting 23.0.10
- 6.0 CVE-2023-25579 Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and normalizing the string in the wrong order. The funct… fixed in 23.0.12
- 5.3 CVE-2023-25162 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.12 and Nextcloud Enterprise server prior to 24.0.8 and 23.… fixed in 23.0.12
- 3.7 CVE-2023-25161 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 25.0.1 24.0.8, and 23.0.12 missin… fixed in 23.0.12
- 3.5 CVE-2024-37315 Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the files_versions app is enabled. It is re…
- 3.5 CVE-2023-28834 Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterprise Server 23.0.0 until 23.0.11, 24.0.0 until 24.… fixed in 23.0.14
- 3.5 CVE-2023-28835 Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number generator, so when… fixed in 23.0.14
- 3.0 CVE-2024-22403 Nextcloud server is a self hosted personal cloud system. In affected versions OAuth codes did not expire. When an attacker would get access to an authorization code they could authenticate at any t… fixed in 28.0.0
- 2.4 CVE-2023-28833 Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was not restricted an… fixed in 23.0.14
- 2.4 CVE-2022-41969 Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.11, 24.0.7, and 25.0.0, there is no password length limit when creating a user as an administrator. An administrator… fixed in 23.0.11
Newer releases
| 35.0.2 | Oct 15, 2026 | 23.0.10 → 35.0.2 |
| 35.0.1 | Sep 24, 2026 | 23.0.10 → 35.0.1 |
| 35.0.0 | Sep 15, 2026 | 23.0.10 → 35.0.0 |
| 34.0.5 | Oct 15, 2026 | 23.0.10 → 34.0.5 |
| 34.0.4 | Sep 10, 2026 | 23.0.10 → 34.0.4 |
| 34.0.3 | Aug 13, 2026 | 23.0.10 → 34.0.3 |
| 34.0.2 | Jul 23, 2026 | 23.0.10 → 34.0.2 |
| 34.0.1 | Jun 25, 2026 | 23.0.10 → 34.0.1 |
| 34.0.0 | Jun 8, 2026 | 23.0.10 → 34.0.0 |
| 33.0.10 | Oct 15, 2026 | 23.0.10 → 33.0.10 |
| 33.0.9 | Sep 10, 2026 | 23.0.10 → 33.0.9 |
| 33.0.8 | Aug 13, 2026 | 23.0.10 → 33.0.8 |
| 33.0.7 | Jul 23, 2026 | 23.0.10 → 33.0.7 |
| 33.0.6 | Jun 25, 2026 | 23.0.10 → 33.0.6 |
| 33.0.5 | Jun 2, 2026 | 23.0.10 → 33.0.5 |