Data Exposure Vulnerability in Nextcloud Server by Nextcloud
CVE-2025-66510
4.5MEDIUM
What is CVE-2025-66510?
Nextcloud Server and Nextcloud Enterprise Server contain a vulnerability that permits authenticated users to access personal data belonging to other users, such as emails, names, and identifiers. This occurs due to insufficient access control during contact searches, enabling users to retrieve information from accounts that are not directly associated with them. The affected versions include Nextcloud Server prior to 31.0.10 and 32.0.1, as well as Nextcloud Enterprise Server prior to multiple versions. Users are urged to update their installations to secure their data.
Affected Version(s)
security-advisories >= 32.0.0beta1, < 32.0.1 < 32.0.0beta1, 32.0.1
security-advisories < 31.0.10 < 31.0.10