CVE-2024-52511

Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no access to. It is recommended that the Nextcloud Tables is upgraded to 0.8.0.
CVSS

No CVSS.

Configurations

No configuration.

History

15 Nov 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-15 18:15

Updated : 2024-11-18 17:11


NVD link : CVE-2024-52511

Mitre link : CVE-2024-52511


JSON object : View

Products Affected

No product.

CWE
CWE-639

Authorization Bypass Through User-Controlled Key