File Inclusion Vulnerability in Nextcloud Tables by Nextcloud
CVE-2025-58051
6.5MEDIUM
What is CVE-2025-58051?
The Nextcloud Tables application allows users to create custom tables with specific columns. However, prior versions up to 0.7.5, 0.8.7, and 0.9.4 are susceptible to a file inclusion vulnerability. Attackers may exploit this flaw by importing tables and specifying files on the server. If these files are formatted in line with the PhpSpreadsheet library's requirements, their contents may be inadvertently exposed to the attacker, leading to potential data leaks. Users are strongly advised to upgrade to versions 0.7.6, 0.8.8, or 0.9.5 to mitigate this risk.
Affected Version(s)
security-advisories >= 0.7.0, < 0.7.6 < 0.7.0, 0.7.6
security-advisories >= 0.8.0, < 0.8.8 < 0.8.0, 0.8.8
security-advisories >= 0.9.0, < 0.9.5 < 0.9.0, 0.9.5