Skip to content

Malicious user could break user administration page

Low
LukasReschke published GHSA-fx62-q47f-f665 Jun 1, 2021

Package

Nextcloud Server

Affected versions

< 19.0.11, < 20.0.10, < 21.0.2

Patched versions

19.0.11, 20.0.10, 21.0.2

Description

Impact

A malicious user may be able to break the user administration page. This would disallow administrators to administrate users on the Nextcloud instance.

Patches

It is recommended that the Nextcloud Server is upgraded to 19.0.11, 20.0.10 or 21.0.2

Workarounds

Use the OCC command line tool to administrate the Nextcloud users.

References

For more information

If you have any questions or comments about this advisory:

Severity

Low

CVE ID

CVE-2021-32657

Weaknesses

Credits