nextcloud_abuse_letter

Dear,

OwnCloud and Nextcloud are software suites for running self-hosted cloud
instances for data synchronization and sharing.

Recently a German company has performed security scans for installations of
ownCloud and Nextcloud openly accessible from the Internet. There have been
Owncloud and Nextcloud instances discovered within your network which
contain security vulnerabilities. We are contacting you because you are
listed as the abuse contact for this network.

The German company has provided detailed information on the vulnerabilities
which have been identified within each cloud instance at:
https://scan.nextcloud.com/results/{UUID}

The parameter {UUID} needs to be replaced with the UUID provided with the
cloud instance mentioned in the provided CSV report.

We would like to ask you to notify the owners of the affected systems.
Software updates fixing the vulnerabilities are publicly available.

In case of questions on the tests performed by the German company please
reach out to <###########@nextcloud.com>.

Please find attached a CSV list of affected systems hosted on your network.
The timestamp (timezone UTC) indicates when the vulnerable cloud
installation was identified. Additionally, each record includes a risk
level and an individual ID (UUID).