PT-2024-4381 · Nextcloud+2 · Nextcloud Server+3

7H3B4Dger · Published 2024-06-14 · Updated 2025-01-24 · CVE-2024-37315

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 26.0.12 Nextcloud Server versions prior to 27.1.7 Nextcloud Server versions prior to 28.0.3 Nextcloud Enterprise Server versions prior to 23.0.12.16 Nextcloud Enterprise Server versions prior to 24.0.12.12 Nextcloud Enterprise Server versions prior to 25.0.13.6 Nextcloud Enterprise Server versions prior to 26.0.12 Nextcloud Enterprise Server versions prior to 27.1.7 Nextcloud Enterprise Server versions prior to 28.0.3

Description The issue is related to the files versions() function in Nextcloud Server, which allows an attacker with read-only access to a file to restore older versions of a document when the files versions app is enabled. This can be exploited by a remote attacker.

Recommendations Upgrade Nextcloud Server to version 26.0.12 Upgrade Nextcloud Server to version 27.1.7 Upgrade Nextcloud Server to version 28.0.3 Upgrade Nextcloud Enterprise Server to version 23.0.12.16 Upgrade Nextcloud Enterprise Server to version 24.0.12.12 Upgrade Nextcloud Enterprise Server to version 25.0.13.6 Upgrade Nextcloud Enterprise Server to version 26.0.12 Upgrade Nextcloud Enterprise Server to version 27.1.7 Upgrade Nextcloud Enterprise Server to version 28.0.3 As a temporary workaround, consider disabling the files versions app until a patch is available.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

ALT-PU-2024-14145

ALT-PU-2024-14169

ALT-PU-2025-1855

BDU:2024-04872

CVE-2024-37315

GHSA-5MQ8-738W-5942

Affected Products

Alt Linux

Nextcloud Enterprise Server

Nextcloud Server

Red Os

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/37xxx/CVE-2024-37315.json · Exploit
• https://github.com/nextcloud/server/pull/43727 · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5mq8-738w-5942 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-37315 · Security Note
• https://bdu.fstec.ru/vul/2024-04872 · Security Note
• https://osv.dev/vulnerability/CVE-2024-37315 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-27-06-24 · Note
• https://twitter.com/CVEnew/status/1801673790365253963 · Twitter Post
• https://hackerone.com/reports/1356508 · Note
• https://twitter.com/linuxpatch/status/1801662326912794860 · Twitter Post