CVE-2024-37314

Description

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

References

https://hackerone.com/reports/1946298

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43

https://github.com/nextcloud/photos/pull/1749

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3