VULNERABILITY INTELLIGENCE

CVE-2024-52516

CVSS score3 LOW

EPSS probability0.46%

CISA KEVNot currently listed

Published2024-11-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N

Description

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 or 23.0.11 or 24.0.6 and Nextcloud Enterprise Server is upgraded to 22.2.11 or 23.0.11 or 24.0.6.

Weakness classification

security-advisories@github.com: CWE-269
nvd@nist.gov: NVD-CWE-noinfo

Primary references

security-advisories@github.com — Vendor Advisory
security-advisories@github.com — Patch
security-advisories@github.com — Issue Tracking