CVE-2024-52507CWE-639

Share information of the Nextcloud Tables app is not limited to affected users

Low · published November 15, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is shared with which groups and users and the respective permissions was not limited to affected users. It is recommended that the Nextcloud Tables app is upgraded to 0.8.1.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-11-15T17:24Z
EPSS history
Timeline
  • 15 NOV 17:24Z
    Share information of the Nextcloud Tables app is not limited to affected users
    cvelistv5