PT-2024-19393 · Nextcloud · Nextcloud Guests App

Ry0Tak · Published 2024-01-18 · Updated 2024-01-26 · CVE-2024-22402

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud guests app versions prior to 2.4.1 Nextcloud guests app versions prior to 2.5.1 Nextcloud guests app versions prior to 3.0.1

Description The Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions, users were able to load the first page of apps they were actually not allowed to access. Depending on the selection of apps installed, this may present a permissions bypass.

Recommendations For versions prior to 2.4.1, upgrade to 2.4.1. For versions prior to 2.5.1, upgrade to 2.5.1. For versions prior to 3.0.1, upgrade to 3.0.1. As a temporary workaround, consider restricting access to sensitive apps until the Guests app is upgraded.

Exploit

Fix

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2024-22402

GHSA-V3QW-7VGV-2FXJ

Affected Products

Nextcloud Guests App

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22402.json · Exploit
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v3qw-7vgv-2fxj · Vendor Advisory
• https://github.com/nextcloud/guests/pull/1082 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22402 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22402 · Vendor Advisory
• https://t.me/cvenotify/67995 · Telegram Post
• https://hackerone.com/reports/2251074 · Note
• https://twitter.com/VulmonFeeds/status/1748129879978062270 · Twitter Post
• https://t.me/cvenotify/68826 · Telegram Post
• https://twitter.com/CVEnew/status/1748082315144634620 · Twitter Post