MEDIUM🇵🇱 Wersja polska

CVE-2025-66552

CVSS 4.3v3.1pub. 2025-12-05upd. 2025-12-10

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

  • Nextcloud Server

    APP
    Nextcloud
    30.0.0 – 30.0.9 (bez)31.0.0 – 31.0.1 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-26482CRITICAL9.0ten sam produkt

Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation ...

CVE-2021-32802CRITICAL9.3ten sam produkt

Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews fo...

CVE-2021-22915CRITICAL9.8ten sam produkt

Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion...

CVE-2026-45281HIGH8.1ten sam produkt

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before...

CVE-2024-37313HIGH7.3ten sam produkt

Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the...