CVE-2021-22877: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.

Affected products

• Fedoraproject Fedora: version 34 only
• Nextcloud Nextcloud Server: before 20.0.6 (fixed in 20.0.6)

Published 2021-03-03. Last modified 2026-06-17.