CVE-2024-52510
CVSS 3.1 Score 4.2 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 295
Summary
CVE-2024-52510 is a vulnerability affecting the Nextcloud Desktop Client. This tool is used for file synchronization between a Nextcloud Server and a user's computer. The vulnerability allows signature validation bypass if a manipulated server sends an empty initial signature. This issue could potentially lead to unauthorized access or data theft. Users are advised to upgrade their Nextcloud Desktop client to version 3.14.2 or later to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Desktop Client