Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-66545

Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash bin. This vulnerability is fixed in 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2.

Published

2025-12-05T18:15:57.803

Last Modified

2025-12-09T19:10:33.430

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 3.5 (LOW)

Weaknesses
  • Type: Secondary
    CWE-707
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nextcloud group_folders < 14.0.11 Yes
Application nextcloud group_folders < 15.3.12 Yes
Application nextcloud group_folders < 16.0.15 Yes
Application nextcloud group_folders < 17.0.14 Yes
Application nextcloud group_folders < 18.1.8 Yes
Application nextcloud group_folders < 20.1.2 Yes
References