← Back

CVE-2024-52507

nvd nist
Published: Nov 15, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is shared with which groups and users and the respective permissions was not limited to affected users. It is recommended that the Nextcloud Tables app is upgraded to 0.8.1.

Affected (1)

Products: Nextcloud: Tables
Nextcloud
1 product
Tables
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Tables
From 0.3.0 to 0.8.1

Related CWEs

CWE-639
Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (4)

Source: security-advisories@github.com
Vendor Advisory
Source: security-advisories@github.com
Patch
Source: security-advisories@github.com
Issue Tracking
Source: security-advisories@github.com
Issue Tracking

Timeline

No history available yet.