PT-2023-9698 · Nextcloud+1 · Nextcloud Enterprise Server+2

Pulsejet · Published 2023-11-21 · Updated 2025-10-01 · CVE-2024-52515

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 27.1.10 Nextcloud Server versions prior to 28.0.6 Nextcloud Server versions prior to 29.0.1 Nextcloud Enterprise Server versions prior to 24.0.12.15 Nextcloud Enterprise Server versions prior to 25.0.13.10 Nextcloud Enterprise Server versions prior to 26.0.13.4 Nextcloud Enterprise Server versions prior to 27.1.10 Nextcloud Enterprise Server versions prior to 28.0.6 Nextcloud Enterprise Server versions prior to 29.0.1

Description The issue is related to the SVG preview provider in Nextcloud Server, which is disabled by default. If an admin enables this feature, a malicious user could upload a manipulated SVG file that references other paths. This could allow the preview of the SVG to display the contents of another file instead, potentially leading to unauthorized access to confidential information.

Recommendations For Nextcloud Server versions prior to 27.1.10, upgrade to version 27.1.10 or later. For Nextcloud Server versions prior to 28.0.6, upgrade to version 28.0.6 or later. For Nextcloud Server versions prior to 29.0.1, upgrade to version 29.0.1 or later. For Nextcloud Enterprise Server versions prior to 24.0.12.15, upgrade to version 24.0.12.15 or later. For Nextcloud Enterprise Server versions prior to 25.0.13.10, upgrade to version 25.0.13.10 or later. For Nextcloud Enterprise Server versions prior to 26.0.13.4, upgrade to version 26.0.13.4 or later. For Nextcloud Enterprise Server versions prior to 27.1.10, upgrade to version 27.1.10 or later. For Nextcloud Enterprise Server versions prior to 28.0.6, upgrade to version 28.0.6 or later. For Nextcloud Enterprise Server versions prior to 29.0.1, upgrade to version 29.0.1 or later. As a temporary workaround, consider disabling the SVG preview provider until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-706

Related Identifiers

BDU:2024-10198

CVE-2024-52515

GHSA-5M5G-HW8C-2236

Affected Products

Nextcloud Enterprise Server

Nextcloud Server

Red Os

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52515.json · Exploit
• https://github.com/nextcloud/server/commit/7e1c30f82a63fbea8c269e0eec38291377f32604 · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5m5g-hw8c-2236 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10198 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-52515 · Security Note
• https://osv.dev/vulnerability/CVE-2024-52515 · Vendor Advisory
• https://github.com/nextcloud/server/pull/45340 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52515 · Note
• https://redos.red-soft.ru/support/secure · Note
• https://t.me/cveNotify/137090 · Telegram Post
• https://hackerone.com/reports/2484499 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-cve-2024-52514-cve-2024-52515 · Note
• https://t.me/cvedetector/11121 · Telegram Post
• https://twitter.com/CVEnew/status/1857476924529877416 · Twitter Post