CVE-2021-41233

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 20.0.14 Nextcloud Server versions prior to 21.0.6 Nextcloud Server versions prior to 22.2.1

Description The Nextcloud Text application, which is shipped with Nextcloud Server by default, has an issue that allows an attacker to access the folder names of "File Drop" if they have knowledge of the sharing link.

Recommendations For versions prior to 20.0.14, upgrade to 20.0.14 or later. For versions prior to 21.0.6, upgrade to 21.0.6 or later. For versions prior to 22.2.1, upgrade to 22.2.1 or later. As a temporary workaround for users unable to upgrade, consider disabling the Nextcloud Text application in the application settings.