{"id":12861,"date":"2016-07-18T15:02:46","date_gmt":"2016-07-18T15:02:46","guid":{"rendered":"https:\/\/nextcloud.com\/?p=591"},"modified":"2023-06-07T11:16:48","modified_gmt":"2023-06-07T09:16:48","slug":"httpoxy-can-affect-nextcloud-get-your-update-now","status":"publish","type":"post","link":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/","title":{"rendered":"httpoxy Can Affect Nextcloud, Get Your Update Now"},"content":{"rendered":"<p><a href=\"https:\/\/httpoxy.org\/\"><img decoding=\"async\" src=\"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png\" alt=\"httpoxy\" width=\"300\" height=\"76\" class=\"alignright size-medium wp-image-598\" \/><\/a><br \/>\nWe ship Guzzle 5 as part of Nextcloud. This handles http requests and supports HTTP_PROXY environment variable which can be abused, in some special scenario&#8217;s, by an attacker to read content. In the worst case, when you use the ajax cron feature, an attacker can potentially see external storage credentials and data. We recommend not to use the ajax cron feature but the system cron if possible, as that also improves performance and reliability.<\/p>\n<p>As a precaution and because security and privacy are paramount for our users, we released a security update. Grab the <a href=\"https:\/\/nextcloud.com\/install\">latest from the install page<\/a>! Here is documentation on doing a manual upgrade or <a href=\"http:\/\/blog.jospoortvliet.com\/2016\/06\/migrating-to-nextcloud-9.html\" target=\"_blank\" rel=\"noopener\">migrate<\/a>.<\/p>\n<p>Learn more about <a href=\"https:\/\/httpoxy.org\/\" target=\"_blank\" rel=\"noopener\">httpoxy here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We ship Guzzle 5 as part of Nextcloud. This handles http requests and supports HTTP_PROXY environment variable which can be abused, in some special scenario&#8217;s, by an attacker to read content. In the worst case, when you use the ajax cron feature, an attacker can potentially see external storage credentials and data. We recommend not [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"publish_to_discourse":"1","publish_post_category":"16","wpdc_auto_publish_overridden":"","wpdc_topic_tags":"","wpdc_pin_topic":"","wpdc_pin_until":"","discourse_post_id":"5728","discourse_permalink":"https:\/\/help.nextcloud.com\/t\/httpoxy-can-effect-nextcloud-get-your-update-now\/1690","wpdc_publishing_response":"","wpdc_publishing_error":"","footnotes":""},"categories":[14,13],"tags":[],"class_list":["post-12861","post","type-post","status-publish","format-standard","hentry","category-release","category-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>httpoxy Can Affect Nextcloud, Get Your Update Now - Nextcloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"httpoxy Can Affect Nextcloud, Get Your Update Now - Nextcloud\" \/>\n<meta property=\"og:description\" content=\"We ship Guzzle 5 as part of Nextcloud. This handles http requests and supports HTTP_PROXY environment variable which can be abused, in some special scenario&#8217;s, by an attacker to read content. In the worst case, when you use the ajax cron feature, an attacker can potentially see external storage credentials and data. We recommend not [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/\" \/>\n<meta property=\"og:site_name\" content=\"Nextcloud\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Nextclouders\/\" \/>\n<meta property=\"article:published_time\" content=\"2016-07-18T15:02:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-07T09:16:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png\" \/>\n<meta name=\"author\" content=\"Jos Poortvliet\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nextclouders\" \/>\n<meta name=\"twitter:site\" content=\"@nextclouders\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jos Poortvliet\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minuto\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/\"},\"author\":{\"name\":\"Jos Poortvliet\",\"@id\":\"https:\/\/nextcloud.com\/es\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2\"},\"headline\":\"httpoxy Can Affect Nextcloud, Get Your Update Now\",\"datePublished\":\"2016-07-18T15:02:46+00:00\",\"dateModified\":\"2023-06-07T09:16:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/\"},\"wordCount\":123,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/nextcloud.com\/es\/#organization\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png\",\"articleSection\":[\"Release\",\"Security\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/\",\"url\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/\",\"name\":\"httpoxy Can Affect Nextcloud, Get Your Update Now - Nextcloud\",\"isPartOf\":{\"@id\":\"https:\/\/nextcloud.com\/es\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png\",\"datePublished\":\"2016-07-18T15:02:46+00:00\",\"dateModified\":\"2023-06-07T09:16:48+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#primaryimage\",\"url\":\"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png\",\"contentUrl\":\"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nextcloud.com\/es\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"httpoxy Can Affect Nextcloud, Get Your Update Now\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nextcloud.com\/es\/#website\",\"url\":\"https:\/\/nextcloud.com\/es\/\",\"name\":\"Nextcloud\",\"description\":\"Regain control over your data\",\"publisher\":{\"@id\":\"https:\/\/nextcloud.com\/es\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nextcloud.com\/es\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/nextcloud.com\/es\/#organization\",\"name\":\"Nextcloud\",\"url\":\"https:\/\/nextcloud.com\/es\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/nextcloud.com\/es\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg\",\"contentUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Nextcloud\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/es\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/Nextclouders\/\",\"https:\/\/x.com\/nextclouders\",\"https:\/\/www.linkedin.com\/company\/10827569\/\",\"https:\/\/youtube.com\/nextcloud\",\"https:\/\/www.instagram.com\/nextclouders\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/nextcloud.com\/es\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2\",\"name\":\"Jos Poortvliet\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/nextcloud.com\/es\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g\",\"caption\":\"Jos Poortvliet\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"httpoxy Can Affect Nextcloud, Get Your Update Now - Nextcloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/","og_locale":"es_ES","og_type":"article","og_title":"httpoxy Can Affect Nextcloud, Get Your Update Now - Nextcloud","og_description":"We ship Guzzle 5 as part of Nextcloud. This handles http requests and supports HTTP_PROXY environment variable which can be abused, in some special scenario&#8217;s, by an attacker to read content. In the worst case, when you use the ajax cron feature, an attacker can potentially see external storage credentials and data. We recommend not [&hellip;]","og_url":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/","og_site_name":"Nextcloud","article_publisher":"https:\/\/www.facebook.com\/Nextclouders\/","article_published_time":"2016-07-18T15:02:46+00:00","article_modified_time":"2023-06-07T09:16:48+00:00","og_image":[{"url":"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png","type":"","width":"","height":""}],"author":"Jos Poortvliet","twitter_card":"summary_large_image","twitter_creator":"@nextclouders","twitter_site":"@nextclouders","twitter_misc":{"Escrito por":"Jos Poortvliet","Tiempo de lectura":"1 minuto"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#article","isPartOf":{"@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/"},"author":{"name":"Jos Poortvliet","@id":"https:\/\/nextcloud.com\/es\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2"},"headline":"httpoxy Can Affect Nextcloud, Get Your Update Now","datePublished":"2016-07-18T15:02:46+00:00","dateModified":"2023-06-07T09:16:48+00:00","mainEntityOfPage":{"@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/"},"wordCount":123,"commentCount":0,"publisher":{"@id":"https:\/\/nextcloud.com\/es\/#organization"},"image":{"@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png","articleSection":["Release","Security"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/","url":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/","name":"httpoxy Can Affect Nextcloud, Get Your Update Now - Nextcloud","isPartOf":{"@id":"https:\/\/nextcloud.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#primaryimage"},"image":{"@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png","datePublished":"2016-07-18T15:02:46+00:00","dateModified":"2023-06-07T09:16:48+00:00","breadcrumb":{"@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#primaryimage","url":"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png","contentUrl":"https:\/\/nextcloud.com\/media\/httpoxy-300x76.png"},{"@type":"BreadcrumbList","@id":"https:\/\/nextcloud.com\/es\/blog\/httpoxy-can-affect-nextcloud-get-your-update-now\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nextcloud.com\/es\/"},{"@type":"ListItem","position":2,"name":"httpoxy Can Affect Nextcloud, Get Your Update Now"}]},{"@type":"WebSite","@id":"https:\/\/nextcloud.com\/es\/#website","url":"https:\/\/nextcloud.com\/es\/","name":"Nextcloud","description":"Regain control over your data","publisher":{"@id":"https:\/\/nextcloud.com\/es\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nextcloud.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/nextcloud.com\/es\/#organization","name":"Nextcloud","url":"https:\/\/nextcloud.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/nextcloud.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","width":"1024","height":"1024","caption":"Nextcloud"},"image":{"@id":"https:\/\/nextcloud.com\/es\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Nextclouders\/","https:\/\/x.com\/nextclouders","https:\/\/www.linkedin.com\/company\/10827569\/","https:\/\/youtube.com\/nextcloud","https:\/\/www.instagram.com\/nextclouders\/"]},{"@type":"Person","@id":"https:\/\/nextcloud.com\/es\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2","name":"Jos Poortvliet","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/nextcloud.com\/es\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g","caption":"Jos Poortvliet"}}]}},"featured_media_url":false,"_links":{"self":[{"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/posts\/12861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/comments?post=12861"}],"version-history":[{"count":0,"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/posts\/12861\/revisions"}],"wp:attachment":[{"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/media?parent=12861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/categories?post=12861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nextcloud.com\/es\/wp-json\/wp\/v2\/tags?post=12861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}