Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-37882

Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshare the item with more permissions. It is recommended that the Nextcloud Server is upgraded to 26.0.13 or 27.1.8 or 28.0.4 and that the Nextcloud Enterprise Server is upgraded to 26.0.13 or 27.1.8 or 28.0.4.

Published

2024-06-14T16:15:12.863

Last Modified

2024-11-21T09:24:27.723

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-284
  • Type: Primary
    CWE-281
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nextcloud nextcloud_server < 26.0.13 Yes
Application nextcloud nextcloud_server < 27.1.8 Yes
Application nextcloud nextcloud_server < 28.0.4 Yes
Application nextcloud nextcloud_server < 23.0.12.17 Yes
Application nextcloud nextcloud_server < 24.0.12.13 Yes
Application nextcloud nextcloud_server < 25.0.13.8 Yes
Application nextcloud nextcloud_server < 26.0.13 Yes
Application nextcloud nextcloud_server < 27.1.8 Yes
Application nextcloud nextcloud_server < 28.0.4 Yes
References