Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticated users with access to any file comment, to read the content of all comments. It is recommended that the Nextcloud Server is upgraded to 31.0.12 or 32.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 21.0.9.20, 22.2.10.35, 23.0.12.31, 24.0.12.30, 25.0.13.25, 26.0.13.22, 27.1.11.22, 28.0.14.13, 29.0.16.10, 30.0.17.5, 31.0.12 or 32.0.3
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 31.0.0, < 31.0.12CPE matchmatch criteria | cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* | ||
>= 32.0.0, < 32.0.3CPE matchmatch criteria | cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:* | ||
>= 21.0.0, < 21.0.9.20CPE matchmatch criteria | cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* | ||
>= 22.0.0, < 22.2.10.35CPE matchmatch criteria | cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* | ||
>= 23.0.0, < 23.0.12.31CPE matchmatch criteria | cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.