Snapshot 7832
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security and advisories This page hosts our security policies and information with regards to reporting security flaws. Nextcloud security Security in Nextcloud Nextcloud is designed to offer the best security in the on-premises content collaboration industry. Read more about the security features and our development process. More about security Server owners For server owners, our documentation has a section with best practices and tips on securing a Nextcloud server. See more Security advisories Official CVE database Threat model Report a security issue If you have discovered a security issue with Nextcloud, please read our responsible disclosure guidelines and contact us at hackerone.com/nextcloud. Your report should include: Product version A vulnerability description Reproduction steps What happens next A member of the security team will confirm the vulnerability, determine its impact, and develop a fix. The fix will be applied to the master branch, tested, and packaged in the next security release. The vulnerability will be publicly announced after the release. Finally, your name will be added to the hall of fame as a thank you from the entire Nextcloud community. Read our threat model to know what is expected behavior. PGP Key for Submissions In order to facilitate secure submission of security issues, we provide the following PGP key for confidential submission: Key ID A724937A Fingerprint 2880 6A87 8AE4 23A2 8372 792E D758 99B9 A724 937A We do however recommend to not encrypt the information submitted via HackerOne as only a small subset of the team has access to this key. Guidelines Responsible disclosure guidelines The Nextcloud community kindly requests that you comply with the following guidelines when researching and reporting security vulnerabilities: Only test for vulnerabilities on your own install of Nextcloud Server Confirm the vulnerability applies to a supported product version Share vulnerabilities in detail only with the security team Allow reasonable time for a response from the security team Do not publish information related to the vulnerability until Nextcloud has made an announcement to the community Get started now Reduce compliance risks, improve internal collaboration and reduce operational expenses with the leading content collaboration platform. Contact us now to learn how Nextcloud can help you! Get a quote Call us: +49 711 25 24 28 90 Supported Product Versions Nextcloud Server 35.0.0 (latest release) 34.0.0 33.0.0 You will find our Maintenance and Release Schedule on GitHub. Please have a close look into the End of Life-section. Note that the Github page has the authoritative list of supported releases – the list above is manually maintained and thus occasionally outdated. If you want to continue to use versions, which reached their End of Life, please contact Nextcloud sales to get access to our Long Term Support offering. Nextcloud Desktop Clients Latest release on our download servers Nextcloud Android Clients Latest release of Nextcloud Files in the Google Play Store Latest release of Nextcloud Talk in the Google Play Store Nextcloud iOS Clients Latest release of Nextcloud Files in the App Store Latest release of Nextcloud Talk in the App Store We save some cookies to count visitors and make the site easier to use. This doesn't leave our server and isn't to track you personally! See our Privacy Policy for more information. Customize Customize Essentials More details Essential cookies enable basic functions and are necessary for the proper function of the website. Accept cookie Cookie name:wp-wpml_current_language Cookie description:Set the language on the website Cookie expiry:No expiration Consent Accept cookie Cookie name:nc_cookie_banner Cookie description:Saves the cookie containing the user cookies preferences Cookie expiry:30 days Consent Accept cookie Convenience More details Cookies used to save the data entered in forms, such as name, email, phone number, and preferred language. Accept cookie Cookie name:nc_form_fields Cookie description:Remembers the data filled in the forms for the next time (name, email, phone and preferred language) Cookie expiry:30 days Consent Accept cookie Cookie name:nc_utm_parameters Cookie description:We use cookies to store UTM parameters from your visit so we can understand how you arrived at our website. Cookie expiry:30 days Consent Accept cookie Statistics More details Statistics cookies collect information anonymously and help us understand how our visitors use our website. We use cloud-hosted Matomo Accept cookie Service:Matomo Cookies description: _pk_ses*: Counts the first visit of the user _pk_id*: Helps not to double count the visits. mtm_cookie_consent: Remembers that consent for storing and using cookies was given by the user. Cookies expiry:_pk_ses*: 30 minutes _pk_id*: 13 months mtm_cookie_consent: 30 days Consent Accept cookie External media More details Allows connections for loading external media. No cookies from external media services will be set. Accept cookie Service:Play Youtube videos Service description: All of the Youtube videos get unblocked if this setting is saved Cookie expiry: - Consent Accept cookie Service:Play Vimeo videos Service description: All of the Vimeo videos get unblocked if this setting is saved Cookie expiry: - Consent Accept cookie Service:Show OpenStreetMap iframes Service description: All of the OpenStreetMap iframes get unblocked if this setting is saved Cookie expiry: - Consent Accept cookie