Test ID:	1.3.6.1.4.1.25623.1.0.127379
Category:	General
Title:	Nextcloud Server 24.0.4 < 24.0.10, 25.x < 25.0.4 Improper Access Control Vulnerability (GHSA-w47p-f66h-h2vj)
Summary:	Nextcloud Server is prone to an improper access control; vulnerability.
Description:	Summary: Nextcloud Server is prone to an improper access control vulnerability. Vulnerability Impact: Users that should not be able to download a file can still download an older version and use that for uncontrolled distribution. Affected Software/OS: Nextcloud Server version 24.0.4 prior to 24.0.10 and version 25.x prior to 25.0.4. Solution: Update to version 24.0.10, 25.0.4 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-28844 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-w47p-f66h-h2vj https://github.com/nextcloud/server/pull/36113
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.