PT-2023-9698 · Nextcloud+1 · Nextcloud Enterprise Server+2

Pulsejet · Publicado 2023-11-21 · Atualizado 2025-10-01 · CVE-2024-52515

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 27.1.10 Nextcloud Server versions prior to 28.0.6 Nextcloud Server versions prior to 29.0.1 Nextcloud Enterprise Server versions prior to 24.0.12.15 Nextcloud Enterprise Server versions prior to 25.0.13.10 Nextcloud Enterprise Server versions prior to 26.0.13.4 Nextcloud Enterprise Server versions prior to 27.1.10 Nextcloud Enterprise Server versions prior to 28.0.6 Nextcloud Enterprise Server versions prior to 29.0.1

Description The issue is related to the SVG preview provider in Nextcloud Server, which is disabled by default. If an admin enables this feature, a malicious user could upload a manipulated SVG file that references other paths. This could allow the preview of the SVG to display the contents of another file instead, potentially leading to unauthorized access to confidential information.

Recommendations For Nextcloud Server versions prior to 27.1.10, upgrade to version 27.1.10 or later. For Nextcloud Server versions prior to 28.0.6, upgrade to version 28.0.6 or later. For Nextcloud Server versions prior to 29.0.1, upgrade to version 29.0.1 or later. For Nextcloud Enterprise Server versions prior to 24.0.12.15, upgrade to version 24.0.12.15 or later. For Nextcloud Enterprise Server versions prior to 25.0.13.10, upgrade to version 25.0.13.10 or later. For Nextcloud Enterprise Server versions prior to 26.0.13.4, upgrade to version 26.0.13.4 or later. For Nextcloud Enterprise Server versions prior to 27.1.10, upgrade to version 27.1.10 or later. For Nextcloud Enterprise Server versions prior to 28.0.6, upgrade to version 28.0.6 or later. For Nextcloud Enterprise Server versions prior to 29.0.1, upgrade to version 29.0.1 or later. As a temporary workaround, consider disabling the SVG preview provider until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-706

Identificadores relacionados

BDU:2024-10198

CVE-2024-52515

GHSA-5M5G-HW8C-2236

Produtos afetados

Nextcloud Enterprise Server

Nextcloud Server

Red Os

Referências · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52515.json · Exploit
• https://github.com/nextcloud/server/commit/7e1c30f82a63fbea8c269e0eec38291377f32604 · Correção
• https://github.com/nextcloud/server/pull/45340 · Nota
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5m5g-hw8c-2236 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-10198 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52515 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-52515 · Nota de Segurança
• https://redos.red-soft.ru/support/secure · Nota
• https://t.me/cveNotify/137090 · Publicação no Telegram
• https://hackerone.com/reports/2484499 · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-cve-2024-52514-cve-2024-52515 · Nota
• https://t.me/cvedetector/11121 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1857476924529877416 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2024-52515 · Aviso do Fabricante