CVE-2024-52511

6.5 mediumEPSS 0.5%

Medium (6.5) in nextcloud tables. EPSS 0.5% chance of exploitation in the next 30 days.

Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no access to. It is recommended that the Nextcloud Tables is upgraded to 0.8.0.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2024-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nextcloud:tables

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4qqp-9h2g-7qg7
https://github.com/nextcloud/tables/commit/52846ad81fe192ee977f14c82a229b0d9cdc406c
https://github.com/nextcloud/tables/pull/1351
https://hackerone.com/reports/2671404

Check your stack JSON