VULNERABILITY INTELLIGENCE

CVE-2024-37887

CVSS score3.5 LOW
EPSS probability0.38%
CISA KEVNot currently listed
Published2024-06-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be read by sharees. It is recommended that the Nextcloud Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1 and that the Nextcloud Enterprise Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1.

Weakness classification

  • security-advisories@github.com: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references