Vulnerability · Published May 16, 2025 · Assigned by GitHub_M
CVE-2025-47794Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission
Low 2.6
In plain English
A low-severity improper access control in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Official description
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may read temporary files from Nextcloud running with a different user account, or run a symlink attack. Nextcloud Server versions 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1 fix the issue. No known workarounds are available.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | >= 26.0.0, < 26.0.13.13>= 27.0.0, < 27.1.11.13>= 28.0.0, < 28.0.14.4>= 29.0.0, < 29.0.13>= 30.0.0, < 30.0.7>= 31.0.0, < 31.0.1 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-q568-2933-gcjq x_refsource_CONFIRM
- https://github.com/nextcloud/server/pull/51194 x_refsource_MISC
- https://hackerone.com/reports/1960647 x_refsource_MISC