← Back

CVE-2025-66545

nvd nist
Published: Dec 5, 2025Modified: Oct 15, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash bin. This vulnerability is fixed in 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2.

Affected (6)

Nextcloud
1 product
Group Folders
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Nextcloud
Group Folders
version < 14.0.11
Group Folders
15.0.0 ≤ version < 15.3.12
Group Folders
16.0.0 ≤ version < 16.0.15
Group Folders
17.0.0 ≤ version < 17.0.14
Group Folders
18.0.0 ≤ version < 18.1.8
Group Folders
19.0.0 ≤ version < 20.1.2

Related CWEs

CWE-707
Improper Neutralization
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.

References (4)

Source: security-advisories@github.com
Patch
Source: security-advisories@github.com
Issue Tracking
Source: security-advisories@github.com
Issue TrackingPatch
Source: security-advisories@github.com
PatchVendor Advisory

Timeline

No history available yet.