File Attachment Issue in Nextcloud Mail
CVE-2024-52509
Currently unrated
What is CVE-2024-52509?
The Nextcloud Mail app, part of the self-hosted Nextcloud platform, has a security flaw that permits users to attach shared files without the necessary download permissions. This vulnerability could enable users to send files to themselves, bypassing intended restrictions, and subsequently download those files through their email clients. It is essential to upgrade to the latest versions—2.2.10, 3.6.2, or 3.7.2—to mitigate this risk.