Skip to content
OpenAdvisories
Low · 3.5 CVE-2024-37314 EUVD-2024-36572

Nextcloud Photos' shared albums have no restriction on photo removal

Published Jun 14, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

Affected products

VendorProductAffectedFixed
nextcloud security-advisories >= 25.0.1, < 25.0.7, >= 26.0.0, < 26.0.2 —

Advisories 1

References