Medium severity6.5NVD Advisory· Published Mar 10, 2022· Updated Jun 17, 2026
CVE-2021-41233
CVE-2021-41233
Description
Nextcloud text is a collaborative document editing using Markdown built for the nextcloud server. Due to an issue with the Nextcloud Text application, which is by default shipped with Nextcloud Server, an attacker is able to access the folder names of "File Drop". For successful exploitation an attacker requires knowledge of the sharing link. It is recommended that users upgrade their Nextcloud Server to 20.0.14, 21.0.6 or 22.2.1. Users unable to upgrade should disable the Nextcloud Text application in the application settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: before 20.0.14, 21.0.6, or 22.2.1
- nextcloud/security-advisoriesv5Range: < 20.0.14
Patches
Vulnerability mechanics
References
2- github.com/nextcloud/text/pull/1884nvdPatchThird Party Advisory
- github.com/nextcloud/security-advisories/security/advisories/GHSA-26c8-35cm-xq9mnvdThird Party Advisory
News mentions
0No linked articles in our index yet.