CVE-2024-52509
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Nov 15, 2024
CWE ID 284
Summary
CVE-2024-52509 is a vulnerability affecting Nextcloud Mail, the email application of the self-hosted productivity platform Nextcloud. The issue lies in the incorrect handling of shared files with insufficient download permissions. Maliciously shared files could be attached to emails, allowing recipients to download them via their email clients. To mitigate this risk, it is strongly advised to upgrade Nextcloud Mail to versions 2.2.10, 3.6.2, or 3.7.2.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Nextcloud GmbH