Description (CNA)
Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| nextcloud / security-advisories | affected >= 25.0.1, < 25.0.7; affected >= 26.0.0, < 26.0.2 |
CWE
CWE-284
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43
- https://github.com/nextcloud/photos/pull/1749
- https://hackerone.com/reports/1946298
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.