PT-2024-9164 · Nextcloud+2 · Nextcloud Server+2

Tuyenee · Published 2024-10-17 · Updated 2025-02-01 · CVE-2024-52518

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 28.0.12 Nextcloud Server versions prior to 29.0.9 Nextcloud Server versions prior to 30.0.2

Description: The issue is related to insufficient authentication procedure in Nextcloud Server, allowing an attacker with access to a user's or administrator's session to create, change, or delete external storages without confirming the password. This could potentially lead to unauthorized access.

Recommendations: For versions prior to 28.0.12, upgrade to 28.0.12 or later. For versions prior to 29.0.9, upgrade to 29.0.9 or later. For versions prior to 30.0.2, upgrade to 30.0.2 or later.

Exploit

Fix

Incorrect Authorization

Improper Authentication

Weakness Enumeration

CWE-863

CWE-287

Related Identifiers

ALT-PU-2025-1663

ALT-PU-2025-1855

ALT-PU-2025-2137

BDU:2024-10851

CVE-2024-52518

GHSA-VRHF-532W-99RG

Affected Products

Alt Linux

Nextcloud Server

Red Os

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52518.json · Exploit
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vrhf-532w-99rg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-52518 · Security Note
• https://osv.dev/vulnerability/CVE-2024-52518 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10851 · Security Note
• https://github.com/nextcloud/server/pull/48788 · Note
• https://github.com/nextcloud/server/pull/48373 · Note
• https://github.com/nextcloud/server/pull/48992 · Note
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-031224 · Note
• https://twitter.com/CVEnew/status/1857476929881878997 · Twitter Post
• https://twitter.com/oktsec/status/1857508347303326143 · Twitter Post
• https://hackerone.com/reports/2602973 · Note
• https://t.me/cvedetector/11117 · Telegram Post