Description
Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nextcloud | security-advisories | >= 0.9.0-beta.1, < 0.9.3, < 0.8.6 | — |
Advisories 1
- WID-SEC-2025-2752 Nextcloud: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 7, 2025