CVE-2023-35928

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20.0.14.14, 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, a user could use this functionality to get access to the login credentials of another user and take over their account. This issue has been patched in Nextcloud Server versions 25.0.7 and 26.0.2 and NextCloud Enterprise Server versions 19.0.13.9, 20.0.14.14, 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2. Three workarounds are available. Disable app files_external. Change config setting "Allow users to mount external storage" to disabled in "Administration" > "External storage" settings `…/index.php/settings/admin/externalstorages`. Change config setting to disallow users to create external storages in "Administration" > "External storage" settings `…/index.php/settings/admin/externalstorages` with the types FTP, Nextcloud, SFTP, and/or WebDAV.

• CWE-274

• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-637g-xp2c-qh5hVendor Advisory
• https://github.com/nextcloud/server/pull/38265Issue Tracking
• https://hackerone.com/reports/1978882Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-637g-xp2c-qh5hVendor Advisory
• https://github.com/nextcloud/server/pull/38265Issue Tracking
• https://hackerone.com/reports/1978882Third Party Advisory

Published

Jun 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35920A vulnerability has been identified in SIMATIC MV540 H (All …7.5
• CVE-2023-35921A vulnerability has been identified in SIMATIC MV540 H (All …7.5
• CVE-2023-35924GLPI is a free asset and IT management software package. Sta…9.8
• CVE-2023-35925FastAsyncWorldEdit (FAWE) is designed for efficient world ed…5.5
• CVE-2023-35926Backstage is an open platform for building developer portals…9.9
• CVE-2023-35927NextCloud Server and NextCloud Enterprise Server provide fil…8.1
• CVE-2023-35929Tuleap is a free and open source suite to improve management…5.4
• CVE-2023-3593Mattermost fails to properly validate markdown, allowing an …6.5
• CVE-2023-35930SpiceDB is an open source, Google Zanzibar-inspired, databas…5.3
• CVE-2023-35931Shescape is a simple shell escape library for JavaScript. An…4.3
• CVE-2023-35932jcvi is a Python library to facilitate genome assembly, anno…8.8
• CVE-2023-35933OPenFGA is an open source authorization/permission engine bu…7.5