Unprotected File Retrieval Vulnerability in Nextcloud Server
CVE-2024-52513
Currently unrated
What is CVE-2024-52513?
A vulnerability exists in Nextcloud Server that permits unauthorized users to download attachments referenced in text files via 'Files drop' or 'Password protected' share links. This security flaw allows malicious individuals to bypass access controls, compromising the confidentiality of shared files. Users are strongly advised to upgrade their Nextcloud Server to the latest versions to mitigate this risk.