QwikSec

Security Database

CVE

CWE

Training

CVE-2024-52507

Published: Nov 15, 2024

Modified: Nov 15, 2024

PUBLISHED

CVSS v3.1

3.5

LOW

Description

Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is shared with which groups and users and the respective permissions was not limited to affected users. It is recommended that the Nextcloud Tables app is upgraded to 0.8.1.

Vendor	Product	Versions
nextcloud	security-advisories	affected `>= 0.3.0, < 0.8.1`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-rgvc-xr2w-qq45

x_refsource_CONFIRM

https://github.com/nextcloud/tables/pull/1406

x_refsource_MISC

https://github.com/nextcloud/tables/commit/13ca45f1b9f70f694aea81b78bc7416ec840c332

x_refsource_MISC

https://hackerone.com/reports/2705507

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.