VULNERABILITY INTELLIGENCE

CVE-2024-37314

CVSS score3.5 LOW

EPSS probability0.41%

CISA KEVNot currently listed

Published2024-06-14

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Description

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

Weakness classification

CWE-284: Improper Access Control
CWE-862: Missing Authorization

Primary references

security-advisories@github.com — Patch
security-advisories@github.com — Vendor Advisory
security-advisories@github.com — Issue Tracking
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking