Nextcloud image leaks server and PHP version
Open
Nobody has claimed this yet.
0. Needs triage
enhancement
question
- Dominant language
- Shell
- Stars
- 7.4k
- Forks
- 1.9k
- PR merge metrics
- No merged PRs in 30d
Description
The nextcloud image leaks the server and PHP version.
Steps to reproduce on the command line:
- curl -v https://yourdomain.com
Observed:
< server: Apache/2.4.65 (Debian)
< x-powered-by: PHP/8.3.29
Image used:
- nextcloud:32.0.3
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the report against the nextcloud:32.0.3 image with the shown curl command, then inspect the image's Apache and PHP configuration for version disclosure. Done means the response no longer exposes the Apache server or PHP version while the image continues to serve Nextcloud correctly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- apache, docker, php
- Domain
- devops, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100