CVE-2024-52509: Nextcloud Mail app does not respect download permissions in shares

First published: Fri Nov 15 2024(Updated: )

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly allowed attaching shared files without download permissions as attachments. This allowed users to send them the files to themselves and then downloading it from their mail clients. It is recommended that the Nextcloud Mail is upgraded to 2.2.10, 3.6.2 or 3.7.2.

Credit: security-advisories@github.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/mitre-cve
• source/MITRE
• agent/weakness
• agent/references
• agent/title
• agent/description
• agent/first-publish-date
• agent/type
• collector/nvd-api
• source/NVD
• agent/last-modified-date
• agent/severity
• agent/author
• agent/tags
• agent/event