Is Nextcloud Server 27.0.1 affected?
Jul 20, 2023 · Release notes ↗
17 known vulnerabilities affect 27.0.1 (highest CVSS 8.5).
Your branch 27 has reached end of life (Jun 30, 2024).
113 newer releases in its track, up to 35.0.2. What changed up to 35.0.2
Vulnerabilities affecting 27.0.1
- 8.5 CVE-2023-48239 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and starting in… fixed in 27.1.3
- 8.1 CVE-2024-37882 Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshare the item with more permissions. It is recommended that the Nextcloud Server… fixed in 27.1.8
- 7.3 CVE-2024-37313 Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfully providing the user credentials. It is recommen… fixed in 27.1.8
- 5.7 CVE-2024-52515 Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file referencing paths. If… fixed in 27.1.10
- 5.4 CVE-2023-49791 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to version… fixed in 27.1.4
- 5.3 CVE-2023-49792 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to version… fixed in 27.1.4
- 5.0 CVE-2023-48306 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in… fixed in 27.1.0
- 4.3 CVE-2023-48304 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in… fixed in 27.1.0
- 4.2 CVE-2023-48305 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud E… fixed in 27.1.0
- 4.1 CVE-2024-52514 Nextcloud Server is a self hosted personal cloud system. After a user received a share with some files inside being blocked by the files access control, the user would still be able to copy the int… fixed in 27.1.9
- 3.5 CVE-2024-37887 Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be read by sharees. It is recommended that the Nextcloud Server is upgraded to 27.… fixed in 27.1.10
- 3.5 CVE-2024-37884 Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It is recommended th… fixed in 27.1.8
- 3.5 CVE-2024-37315 Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the files_versions app is enabled. It is re… fixed in 27.1.7
- 3.5 CVE-2023-48301 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud E… fixed in 27.1.3
- 3.5 CVE-2023-48302 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud E… fixed in 27.1.3
- 3.0 CVE-2024-22403 Nextcloud server is a self hosted personal cloud system. In affected versions OAuth codes did not expire. When an attacker would get access to an authorization code they could authenticate at any t… fixed in 28.0.0
- 2.4 CVE-2023-48303 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud E… fixed in 27.1.0
Newer releases
| 35.0.2 | Oct 15, 2026 | 27.0.1 → 35.0.2 |
| 35.0.1 | Sep 24, 2026 | 27.0.1 → 35.0.1 |
| 35.0.0 | Sep 15, 2026 | 27.0.1 → 35.0.0 |
| 34.0.5 | Oct 15, 2026 | 27.0.1 → 34.0.5 |
| 34.0.4 | Sep 10, 2026 | 27.0.1 → 34.0.4 |
| 34.0.3 | Aug 13, 2026 | 27.0.1 → 34.0.3 |
| 34.0.2 | Jul 23, 2026 | 27.0.1 → 34.0.2 |
| 34.0.1 | Jun 25, 2026 | 27.0.1 → 34.0.1 |
| 34.0.0 | Jun 8, 2026 | 27.0.1 → 34.0.0 |
| 33.0.10 | Oct 15, 2026 | 27.0.1 → 33.0.10 |
| 33.0.9 | Sep 10, 2026 | 27.0.1 → 33.0.9 |
| 33.0.8 | Aug 13, 2026 | 27.0.1 → 33.0.8 |
| 33.0.7 | Jul 23, 2026 | 27.0.1 → 33.0.7 |
| 33.0.6 | Jun 25, 2026 | 27.0.1 → 33.0.6 |
| 33.0.5 | Jun 2, 2026 | 27.0.1 → 33.0.5 |