Previews are accessible without a watermark
Package
Office (Richdocuments)
(Nextcloud)
Affected versions
7.0.0, 6.0.0-6.3.0
Patched versions
7.0.1, 6.3.1
Server
(Nextcloud)
25.0.0, 24.0.4 - 24.0.7
25.0.1, 24.0.8
Server (Enterprise)
(Nextcloud)
25.0.0, 24.0.4 - 24.0.7
25.0.1, 24.0.8
Impact
While the download should be hidden and the watermark should get applied the preview is still visible without
Patches
It is recommended that the Nextcloud Server is upgraded to 25.0.1 or 24.0.8
It is recommended that the Nextcloud Enterprise Server is upgraded to 25.0.1 or 24.0.8
It is recommended that the Nextcloud Office (Richdocuments) App is upgraded to 7.0.1 (for 25) or 6.3.1 (for 24)
Workarounds
No workaround available
References
For more information
If you have any questions or comments about this advisory: