Vulnerability · Published Nov 15, 2024 · Assigned by GitHub_M

CVE-2024-52513Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares

Low 2.6

In plain English

A low-severity information exposure in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 3.1)2.6Low

Exploit odds (30 days)0.6%top 53.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Nextcloud Server is a self hosted personal cloud system. After receiving a "Files drop" or "Password protected" share link a malicious user was able to download attachments that are referenced in Text files without providing the password. It is recommended that the Nextcloud Server is upgraded to 28.0.11, 29.0.8 or 30.0.1 and Nextcloud Enterprise Server is upgraded to 25.0.13.13, 26.0.13.9, 27.1.11.9, 28.0.11, 29.0.8 or 30.0.1.

Affected products (as reported)

Vendor	Product	Versions
nextcloud	security-advisories	>= 28.0.0, < 28.0.11>= 29.0.0, < 29.0.8>= 30.0.0, < 30.0.1

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-gxph-5m4j-pfmj x_refsource_CONFIRM
https://github.com/nextcloud/text/pull/6485 x_refsource_MISC
https://github.com/nextcloud/text/commit/ca24b25c93b81626b4e457c260243edeab5f1548 x_refsource_MISC
https://hackerone.com/reports/2376900 x_refsource_MISC