UpHeron
All vulnerabilities

Servers and applications

CVE-2024-37887

Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be read by sharees. It is recommended that the Nextcloud Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1 and that the Nextcloud Enterprise Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1.

Severity
Low 3.5
Published
14 Jun 2024
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
27.1.10, 28.0.6
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • From 27.0.0 before 27.1.10
  • From 28.0.0 up to 28.0.6
  • From 28.0.0 before 28.0.6
  • Version 29.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-37887
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-37887