Vulnerability Details CVE-2024-52511
Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no access to. It is recommended that the Nextcloud Tables is upgraded to 0.8.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.0%
CVSS Severity
CVSS v3 Score 6.3
References
Products affected by CVE-2024-52511
-
cpe:2.3:a:nextcloud:tables:0.6.0
-
cpe:2.3:a:nextcloud:tables:0.6.1
-
cpe:2.3:a:nextcloud:tables:0.6.2
-
cpe:2.3:a:nextcloud:tables:0.6.3
-
cpe:2.3:a:nextcloud:tables:0.6.4
-
cpe:2.3:a:nextcloud:tables:0.6.5
-
cpe:2.3:a:nextcloud:tables:0.6.6
-
cpe:2.3:a:nextcloud:tables:0.7.0
-
cpe:2.3:a:nextcloud:tables:0.7.1
-
cpe:2.3:a:nextcloud:tables:0.7.2
-
cpe:2.3:a:nextcloud:tables:0.7.3
-
cpe:2.3:a:nextcloud:tables:0.7.4
-
cpe:2.3:a:nextcloud:tables:0.7.5
-
cpe:2.3:a:nextcloud:tables:0.7.6