low3.5
CVE-2024-37314
Nextcloud Photos is a photo management app.
Impact
Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Nextcloud Server | from 25.0.0 before 25.0.7 from 26.0.0 before 26.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nextcloud/photos/pull/1749
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43
- https://hackerone.com/reports/1946298
- https://github.com/nextcloud/photos/pull/1749
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43
- https://hackerone.com/reports/1946298