CVE-2024-22404

Name of the Vulnerable Software and Affected Versions Nextcloud files Zip app versions prior to 1.2.1 Nextcloud files Zip app versions prior to 1.4.1 Nextcloud files Zip app versions prior to 1.5.0

Description The Nextcloud files Zip app is a tool to create zip archives from one or multiple files from within Nextcloud. In affected versions, users can download "view-only" files by zipping the complete folder.

Recommendations For versions prior to 1.2.1, upgrade to 1.2.1 or later. For versions prior to 1.4.1, upgrade to 1.4.1 or later. For versions prior to 1.5.0, upgrade to 1.5.0 or later. As a temporary workaround, consider disabling the file zip app until a patch is available.