Two security vulnerabilities in PHP could allow external code to be executed. We recommend disabling the Nextcloud component.
Two critical security vulnerabilities have been discovered in PHP. Nextcloud is the only component within openDesk that is affected by this.
PHP has announced a security patch later today, which we will deploy as an openDesk patch release as soon as possible.
Until the patch is deployed, we recommend isolating or disabling the Nextcloud component.
For the first time with its own stand at the "Digital State" congress: openDesk wants to free public authorities from proprietary dependencies and enable sovereign digital working environments for public administration.
ZenDiSIn openDesk 1.16.1, several bugs were fixed and security vulnerabilities were addressed. As always, we recommend upgrading to the latest version.
News