CVE-2025-66545

Published: Dec 5, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash bin. This vulnerability is fixed in 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2.

Affected (6)

Products: Nextcloud: Group Folders

Nextcloud

1 product

Group Folders

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Nextcloud Group Folders	Before 14.0.11
Nextcloud Group Folders	From 15.0.0 to 15.3.12
Nextcloud Group Folders	From 16.0.0 to 16.0.15
Nextcloud Group Folders	From 17.0.0 to 17.0.14
Nextcloud Group Folders	From 18.0.0 to 18.1.8
Nextcloud Group Folders	From 19.0.0 to 20.1.2