| Package | Affected versions | Patched versions |
|---|---|---|
| nextcloud server | ≥ 16.0.0, < 16.0.2< 15.0.9 | 16.0.215.0.9 |
| backports sle | = 15.0 |
An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free