Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.
References
| Link | Resource |
|---|---|
| https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43 | Vendor Advisory |
| https://github.com/nextcloud/photos/pull/1749 | Patch |
| https://hackerone.com/reports/1946298 | Issue Tracking |
Configurations
Configuration 1 (hide)
|
History
16 Aug 2024, 19:43
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.5 |
| First Time |
Nextcloud
Nextcloud nextcloud Server |
|
| CWE | CWE-862 | |
| CPE | cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:* | |
| References | () https://hackerone.com/reports/1946298 - Issue Tracking | |
| References | () https://github.com/nextcloud/photos/pull/1749 - Patch | |
| References | () https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43 - Vendor Advisory |
14 Jun 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-14 15:15
Updated : 2024-08-16 19:43
NVD link : CVE-2024-37314
Mitre link : CVE-2024-37314
JSON object : View
Products Affected
nextcloud
- nextcloud_server
CWE
CWE-862
Missing Authorization