Nextcloud is updated, go ahead and update yours.
Comment on PHP selfhosting list
DundasStation@lemmy.ca 2 weeks ago
My Nextcloud is the only public facing service on the list. Is it sufficient to just disable public access via Nginx Proxy Manager and continue to permit local access for Nextcloud, or do I need to just shut down Nextcloud until it gets updated?
roofuskit@lemmy.world 2 weeks ago
pound_heap@lemmy.dbzer0.com 2 weeks ago
Public access is what is in immediate danger. Private services are safe from bots, but at risk from attacker on your network - a compromised IoT device or package on server could move laterally to vulnerable PHP services