CVE-2024-52520

CVSS 3.1 Score 5.7 of 10 (medium)

Details

Published Nov 15, 2024
CWE ID 400
CWE ID 79

Summary

CVE-2024-52520 is a vulnerability affecting Nextcloud Server, a self-hosted personal cloud system. Maliciously crafted links could manipulate the link reference provider into downloading larger files than intended to obtain open-graph data. To mitigate this issue, Nextcloud Server users are advised to upgrade to version 28.0.10 or 29.0.7, while Nextcloud Enterprise Server users should upgrade to versions 27.1.11.8, 28.0.10, or 29.0.7.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Nextcloud Server

Affected Vendors

  • Nextcloud GmbH

Advisories, Assessments, and Mitigations