Test ID:	1.3.6.1.4.1.25623.1.0.127394
Category:	General
Title:	Nextcloud Server 24.0.4 < 24.0.7, 25.x < 25.0.1 Improper Access Control Vulnerability (GHSA-7w6h-5qgw-4j94)
Summary:	Nextcloud Server is prone to an improper access control; vulnerability.
Description:	Summary: Nextcloud Server is prone to an improper access control vulnerability. Vulnerability Insight: Secure view for internal shares can be circumvented if also reshare permissions are given. Affected Software/OS: Nextcloud Server version 24.0.4 prior to 24.0.7 and 25.x prior to 25.0.1. Solution: Update to version 24.0.7, 25.0.1 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-25821 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w6h-5qgw-4j94 https://github.com/nextcloud/server/pull/34502 https://hackerone.com/reports/1724016
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.