Nextcloud Text is an open source plaintext editing application which ships with the nextcloud server. In affected versions the Nextcloud Text application returned different error messages depending on whether a folder existed in a public link share. This is problematic in case the public link share has been created with "Upload Only" privileges. (aka "File Drop"). A link share recipient is not expected to see which folders or files exist in a "File Drop" share. Using this vulnerability an attacker is able to enumerate folders in such a share. Exploitation requires that the attacker has access to a valid affected "File Drop" link share. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.0.1. Users who are unable to upgrade are advised to disable the Nextcloud Text application in the app settings.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1255-1 advisory.

  - Nextcloud Text is an open source plaintext editing application which ships with the nextcloud server. In     affected versions the Nextcloud Text application returned different error messages depending on whether a     folder existed in a public link share. This is problematic in case the public link share has been created     with Upload Only privileges. (aka File Drop). A link share recipient is not expected to see which     folders or files exist in a File Drop share. Using this vulnerability an attacker is able to enumerate     folders in such a share. Exploitation requires that the attacker has access to a valid affected File     Drop link share. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.0.1.
    Users who are unable to upgrade are advised to disable the Nextcloud Text application in the app settings.
    (CVE-2021-32766)

  - Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able     to bypass Two Factor Authentication in Nextcloud. Thus knowledge of a password, or access to a WebAuthN     trusted device of a user was sufficient to gain access to an account. It is recommended that the Nextcloud     Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. There are no workaround for this vulnerability.
    (CVE-2021-32800)

  - Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions     may have resulted in logging potentially sensitive key material for the Nextcloud Encryption-at-Rest     functionality. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. If     upgrading is not an option users are advised to disable system logging to resolve this issue until such     time that an upgrade can be performed Note that ff you do not use the Encryption-at-Rest functionality of     Nextcloud you are not affected by this bug. (CVE-2021-32801)

  - Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image     previews for user provided file content. For some image types, the Nextcloud server was invoking a third-     party library that wasn't suited for untrusted user-supplied content. There are several security concerns     with passing user-generated content to this library, such as Server-Side-Request-Forgery, file disclosure     or potentially executing code on the system. The risk depends on your system configuration and the     installed library version. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or     22.1.0. These versions do not use this library anymore. As a workaround users may disable previews by     setting `enable_previews` to `false` in `config.php`. (CVE-2021-32802)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1253-1 advisory.

  - Nextcloud Text is an open source plaintext editing application which ships with the nextcloud server. In     affected versions the Nextcloud Text application returned different error messages depending on whether a     folder existed in a public link share. This is problematic in case the public link share has been created     with Upload Only privileges. (aka File Drop). A link share recipient is not expected to see which     folders or files exist in a File Drop share. Using this vulnerability an attacker is able to enumerate     folders in such a share. Exploitation requires that the attacker has access to a valid affected File     Drop link share. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.0.1.
    Users who are unable to upgrade are advised to disable the Nextcloud Text application in the app settings.
    (CVE-2021-32766)

  - Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able     to bypass Two Factor Authentication in Nextcloud. Thus knowledge of a password, or access to a WebAuthN     trusted device of a user was sufficient to gain access to an account. It is recommended that the Nextcloud     Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. There are no workaround for this vulnerability.
    (CVE-2021-32800)

  - Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions     may have resulted in logging potentially sensitive key material for the Nextcloud Encryption-at-Rest     functionality. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. If     upgrading is not an option users are advised to disable system logging to resolve this issue until such     time that an upgrade can be performed Note that ff you do not use the Encryption-at-Rest functionality of     Nextcloud you are not affected by this bug. (CVE-2021-32801)

  - Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image     previews for user provided file content. For some image types, the Nextcloud server was invoking a third-     party library that wasn't suited for untrusted user-supplied content. There are several security concerns     with passing user-generated content to this library, such as Server-Side-Request-Forgery, file disclosure     or potentially executing code on the system. The risk depends on your system configuration and the     installed library version. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or     22.1.0. These versions do not use this library anymore. As a workaround users may disable previews by     setting `enable_previews` to `false` in `config.php`. (CVE-2021-32802)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
153393	openSUSE 15 Security Update : nextcloud (openSUSE-SU-2021:1255-1)	Nessus	SuSE Local Security Checks	critical
153392	openSUSE 15 Security Update : nextcloud (openSUSE-SU-2021:1253-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2021-32766

medium

Tenable Plugins

critical

critical