CVE-2024-52511 — Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables
Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into …
Published: 2024-11-15 · CVSS: 6.3 · CVSS 3.1
Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no access to. It is recommended that the Nextcloud Tables is upgraded to 0.8.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7