VULNERABILITY INTELLIGENCE

CVE-2024-52513

CVSS score2.6 LOW

EPSS probability0.56%

CISA KEVNot currently listed

Published2024-11-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

Nextcloud Server is a self hosted personal cloud system. After receiving a "Files drop" or "Password protected" share link a malicious user was able to download attachments that are referenced in Text files without providing the password. It is recommended that the Nextcloud Server is upgraded to 28.0.11, 29.0.8 or 30.0.1 and Nextcloud Enterprise Server is upgraded to 25.0.13.13, 26.0.13.9, 27.1.11.9, 28.0.11, 29.0.8 or 30.0.1.

Weakness classification

security-advisories@github.com: CWE-200
nvd@nist.gov: NVD-CWE-noinfo

Primary references

security-advisories@github.com — Vendor Advisory
security-advisories@github.com — Patch
security-advisories@github.com — Issue Tracking
security-advisories@github.com — Issue Tracking