Nextcloud / Approval
3 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-82982 | The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting… | MEDIUM | 4.3 | Sep 18, 2026 |
| CVE-2026-45277 | Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations | LOW | 3.3 | Jun 1, 2026 |
| CVE-2026-45275 | Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers | MEDIUM | 6.5 | Jun 1, 2026 |
| CVE-2025-66515 | Nextcloud Approval app allows users to request approval for other users file | LOW | 2.7 | Dec 5, 2025 |
Showing 1 to 3 of 3 CVEs