Vulnerability · Published Dec 5, 2025 · Assigned by GitHub_M
CVE-2025-66553Nextcloud Tables app allowed users to view columns metadata information of any table
Medium 4.3
In plain English
A medium-severity authorization bypass via user-controlled key in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 77.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authenticated users were able to view meta data of columns in other tables of the Tables app by modifying the numeric ID in a request. This vulnerability is fixed in 0.8.7 and 0.9.4.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | >= 0.9.0-beta.1, < 0.9.4< 0.8.7 |
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p53h-6294-crjw x_refsource_CONFIRM
- https://github.com/nextcloud/tables/pull/1891 x_refsource_MISC
- https://github.com/nextcloud/tables/commit/e975f5bfedb6922f04cdd236cde4e26067fe064e x_refsource_MISC
- https://hackerone.com/reports/3138721 x_refsource_MISC