UpHeron
All vulnerabilities

Servers and applications

CVE-2023-25821

Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improper Access Control. Secure view for internal shares can be circumvented if reshare permissions are also given. This issue is patched in versions 24.0.7 and 25.0.1. No workaround is available.

Severity
High 7.5
Published
25 Feb 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
24.0.7
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • From 24.0.4 before 24.0.7
  • Version 25.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-25821
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-25821