Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2024-37314

Nextcloud Photos' shared albums have no restriction on photo removal

Description

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nextcloud security-advisories

  • >= 25.0.1, < 25.0.7affected
  • >= 26.0.0, < 26.0.2affected

References