CVE-2024-52513: Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares

Medium severity · published Nov 15, 2024

CVE-2024-52513

Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares

4.3

CVSS

0.6%

EPSS

On KEV

Description

Nextcloud Server is a self hosted personal cloud system. After receiving a "Files drop" or "Password protected" share link a malicious user was able to download attachments that are referenced in Text files without providing the password. It is recommended that the Nextcloud Server is upgraded to 28.0.11, 29.0.8 or 30.0.1 and Nextcloud Enterprise Server is upgraded to 25.0.13.13, 26.0.13.9, 27.1.11.9, 28.0.11, 29.0.8 or 30.0.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

Low

Integrity

None

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.6% · higher than 46% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

security-advisories · nextcloud

>= 28.0.0, < 28.0.11; >= 29.0.0, < 29.0.8; >= 30.0.0, < 30.0.1 · source: vendor

Nextcloud Server · Nextcloud

25.0.0 before 25.0.13.13; 26.0.0 before 26.0.13.9; 27.0.0 before 27.1.11.9; 28.0.0 before 28.0.11; 28.0.0 before 28.0.11; 29.0.0 before 29.0.8; +3 more · source: NVD

Affected product

security-advisories

nextcloud

All security-advisories CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-52513

CVE.org

https://www.cve.org/CVERecord?id=CVE-2024-52513

Vendor Advisory

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-gxph-5m4j-pfmj

Patch

https://github.com/nextcloud/text/commit/ca24b25c93b81626b4e457c260243edeab5f1548

Issue Tracking

https://github.com/nextcloud/text/pull/6485

Issue Tracking

https://hackerone.com/reports/2376900