Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
nextcloud/server
master @ 874ef1e
230
Fixes
50
CVEs
CRITICAL
Peak severity
Highlights
Auth Bypass: 56 prior fixes. Scrutinize any change in this area.
core: most-fixed (5 issues). Treat as high-risk during review.
55 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Session and token management mechanisms have historically suffered from logic gaps and state pollution where sub-optimal token validations or automated credential-verification overrides allowed password confirmation/sudo-mode bypasses.
CSRF: WebDAV public share endpoints failed to consistently enforce strict cookie checks and request-token checks, potentially allowing attackers to modify shared files, calendars, or address books.
Auth Bypass: Missing or weak authorization checks in the user provisioning API allowed regular, non-administrative users to modify sensitive user attributes such as quotas, managers, or elevated group memberships.