description: An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.
problem types: Server-Side Request Forgery (SSRF) (CWE-918)
affected:
{
product: Nextcloud Server
vendor: n/a
versions:
status: affected, version: 16.0.1
}