UpHeron
All vulnerabilities

Servers and applications

CVE-2025-47794

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may read temporary files from Nextcloud running with a different user account, or run a symlink attack. Nextcloud Server versions 29.0.13,…

Severity
Medium 4.3
Published
16 May 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, 31.0.1
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • From 26.0.0 before 26.0.13.13
  • From 27.0.0 before 27.1.11.13
  • From 28.0.0 before 28.0.14.4
  • From 29.0.0 before 29.0.13
  • From 30.0.0 before 30.0.7
  • From 31.0.0 before 31.0.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-47794
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-47794