Low severity3.1NVD Advisory· Published Jul 12, 2021· Updated Jun 17, 2026
CVE-2021-32734
CVE-2021-32734
Description
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the Nextcloud Text application shipped with Nextcloud Server returned verbatim exception messages to the user. This could result in a full path disclosure on shared files. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. As a workaround, one may disable the Nextcloud Text application in Nextcloud Server app settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- Range: <19.0.13, <20.0.11, <21.0.3
- osv-coords6 versionspkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.3pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP2pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP3
< 20.0.11-bp153.2.3.1+ 5 more
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- nextcloud/security-advisoriesv5Range: < 19.0.13
Patches
Vulnerability mechanics
References
4- github.com/nextcloud/text/pull/1695nvdPatchThird Party Advisory
- github.com/nextcloud/security-advisories/security/advisories/GHSA-6hf5-c2c4-2526nvdThird Party Advisory
- security.gentoo.org/glsa/202208-17nvdThird Party Advisory
- hackerone.com/reports/1246721nvdPermissions Required
News mentions
0No linked articles in our index yet.