PT-2024-35347

CVE-2024-52507

Published

2024-11-15

Updated

2025-10-01

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Tables versions prior to 0.8.1

Description The issue concerns the sharing of table information in Nextcloud Tables, where the details about which table (identified by a numeric ID) is shared with specific groups and users, along with the respective permissions, were not properly restricted to affected users.

Recommendations For versions prior to 0.8.1, upgrade the Nextcloud Tables app to version 0.8.1 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-639: Authorization Bypass Through User-Controlled Key

Related identifiers

CVE-2024-52507