Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.
References
| Link | Resource |
|---|---|
| https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43 | Vendor Advisory |
| https://github.com/nextcloud/photos/pull/1749 | Patch |
| https://hackerone.com/reports/1946298 | Issue Tracking |
Configurations
Configuration 1 (hide)
|
History
16 Aug 2024, 19:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://hackerone.com/reports/1946298 - Issue Tracking | |
| References | () https://github.com/nextcloud/photos/pull/1749 - Patch | |
| References | () https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.5 |
| First Time |
Nextcloud
Nextcloud nextcloud Server |
|
| CWE | CWE-862 | |
| CPE | cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:* |
14 Jun 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-14 15:15
Updated : 2024-08-16 19:43
NVD link : CVE-2024-37314
Mitre link : CVE-2024-37314
JSON object : View
Products Affected
nextcloud
- nextcloud_server
CWE
CWE-862
Missing Authorization