CVE-2024-37315: Nextcloud Server's read-only users can restore old versions

Medium severity · published Jun 14, 2024

CVE-2024-37315

Nextcloud Server's read-only users can restore old versions

4.3

CVSS

0.4%

EPSS

On KEV

Description

Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the files_versions app is enabled. It is recommended that the Nextcloud Server is upgraded to 26.0.12, 27.1.7 or 28.0.3 and that the Nextcloud Enterprise Server is upgraded to 23.0.12.16, 24.0.12.12, 25.0.13.6, 26.0.12, 27.1.7 or 28.0.3.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack vector

Network

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

Low

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 37% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

security-advisories · nextcloud

>= 26.0.0, < 26.0.12; >= 27.0.0, < 27.1.7; >= 28.0.0, < 28.0.3 · source: vendor

Nextcloud Server · Nextcloud

23.0.0 through 23.0.12; 24.0.0 through 24.0.12; 25.0.0 before 25.0.13; 26.0.0 before 26.0.12; 26.0.0 before 26.0.12; 27.0.0 before 27.1.7; +3 more · source: NVD

Affected product

security-advisories

nextcloud

All security-advisories CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-37315

CVE.org

https://www.cve.org/CVERecord?id=CVE-2024-37315

Vendor Advisory

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5mq8-738w-5942

Patch

https://github.com/nextcloud/server/pull/43727

Issue Tracking

https://hackerone.com/reports/1356508