Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-52511

Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables

Description

Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no access to. It is recommended that the Nextcloud Tables is upgraded to 0.8.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nextcloud security-advisories

  • >= 0.6.0, < 0.8.0affected

References