CVE-2024-37314CWE-284

Nextcloud Photos' shared albums have no restriction on photo removal

Low · published June 14, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-06-14T15:05Z
EPSS history
Timeline
  • 14 JUN 15:05Z
    Nextcloud Photos' shared albums have no restriction on photo removal
    cvelistv5