CVE-2024-52516
Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
15 nov 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 or 23.0.11 or 24.0.6 and Nextcloud Enterprise Server is upgraded to 22.2.11 or 23.0.11 or 24.0.6.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Productos afectados
nextcloud · security-advisories¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →