Vulnerabilities > CVE-2024-37314 - Missing Authorization vulnerability in Nextcloud Server

047910
CVSS 3.5 - LOW
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
LOW
network
low complexity
nextcloud
CWE-862
NVD
Published: 2024-06-14
Updated: 2024-11-21

Summary

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

Vulnerable Configurations

Part Description Count
Application
Nextcloud
16

Common Weakness Enumeration (CWE)

References