Vulnerability Description
Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is shared with which groups and users and the respective permissions was not limited to affected users. It is recommended that the Nextcloud Tables app is upgraded to 0.8.1.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nextcloud | Tables | >= 0.3.0, < 0.8.1 |
Related Weaknesses (CWE)
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-rgvc-xVendor Advisory
- https://github.com/nextcloud/tables/commit/13ca45f1b9f70f694aea81b78bc7416ec840cPatch
- https://github.com/nextcloud/tables/pull/1406Issue Tracking
- https://hackerone.com/reports/2705507Issue Tracking
FAQ
What is CVE-2024-52507?
CVE-2024-52507 is a vulnerability with a CVSS score of 3.5 (LOW). Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is shared with which groups and users and the respective permissions was not limited...
How severe is CVE-2024-52507?
CVE-2024-52507 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-52507?
Check the references section above for vendor advisories and patch information. Affected products include: Nextcloud Tables.