Does CVE-2023-49103 affect Nextcloud?

[meonkeys]

I’m guessing this has naught to do with Nextcloud—looks like CVE-2023-49103 is an issue with an ownCloud plugin called “graphapi”, and I don’t even see that one in the Nextcloud app store. Just wanted to check and make sure.

ownCloud vulnerability with maximum 10 severity score comes under “mass”...

[vnagornyy]

Do the recent OwnCloud CVE also affect Nextcloud?

No (10 characters)

[tflidd]

There is also an official statement:

Security statement

Originally published at: Security statement on ownCloud breach - Nextcloud We are receiving information requests from customers and users worried about the severe security breaches. These occurred in ownCloud (recently aqcuired by US file sync and share vendor Kiteworks) as reported on by Arstechnica and others. We want to make clear that these absolutely do not affect Nextcloud. Nextcloud has a strict security process backed by a USD 10K bug bounty program. We, for example, have a policy…