CVE-2024-52518

Summary

CVE-2024-52518 is a vulnerability affecting Nextcloud Server, a self-hosted personal cloud system. If an attacker manages to gain access to a user or administrator's session, they can manipulate external storage settings, including creation, modification, or deletion, without requiring the password confirmation. To mitigate this risk, it is strongly advised to upgrade the Nextcloud Server to version 28.0.12, 29.0.9, or 30.0.2. This vulnerability highlights the importance of securing user sessions and applying software updates in a timely manner to protect against potential unauthorized access and data manipulation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.