[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-52518":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":23,"technologies":194,"references":196,"score":202,"epss_score":203,"epss_percentile":204,"is_kev":205,"cisa_kev_date_added":206,"cisa_kev_due_date":206,"cisa_ssvc":207,"attack_mappings":217,"exploits":224},38578,"CVE-2024-52518","EUVD-2024-45932","Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or administrator, the attacker would be able to create, change or delete external storages without having to confirm the password. It is recommended that the Nextcloud Server is upgraded to 28.0.12, 29.0.9 or 30.0.2.","2024-11-15T17:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":17,"privilegesRequired":17,"confidentialityImpact":18},"UNCHANGED","3.1",5.4,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L","LOW","NONE",true,[21,22],"CWE-863","CWE-287",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193],"cpe:2.3:a:nextcloud:nextcloud_server:29.0.7:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:rc4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.1:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:rc3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.8:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.9:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.2:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.2:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.11:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.5:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.1:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:rc3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.6:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta6:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.5:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.1:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.11:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.1:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.9:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:beta4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.3:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta5:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.4:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.6:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:beta2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:beta1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.3:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.3:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.5:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.1:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.11:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.1:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.1:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta5:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc5:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.6:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.8:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:beta3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.1:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.6:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.2:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:rc3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.4:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.9:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:rc4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.5:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.5:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:rc4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.5:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta5:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.11:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:rc3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.5:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.2:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.3:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.7:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.5:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc5:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.8:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta6:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.1:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.4:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.1:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.6:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.10:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta5:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:beta2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.3:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.7:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.4:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.6:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.10:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.6:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.2:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.1:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:rc4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.2:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.10:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.9:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc5:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc5:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.8:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.10:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:beta4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.4:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:rc4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:beta3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:rc3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.6:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.8:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc5:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:rc4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.4:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc4:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.3:rc3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:rc2:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.1:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.4:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.8:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.3:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc3:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:beta1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.4:rc1:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.1:-:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.2:rc3:*:*:enterprise:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:rc5:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.7:rc1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.1:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.0:beta1:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.8:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:30.0.0:rc2:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.7:-:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:28.0.0:beta4:*:*:-:*:*:*","cpe:2.3:a:nextcloud:nextcloud_server:29.0.8:-:*:*:enterprise:*:*:*",[195],"Nextcloud Nextcloud Server",[197,198,199,200,201],"https:\u002F\u002Fgithub.com\u002Fnextcloud\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-vrhf-532w-99rg","https:\u002F\u002Fgithub.com\u002Fnextcloud\u002Fserver\u002Fpull\u002F48373","https:\u002F\u002Fgithub.com\u002Fnextcloud\u002Fserver\u002Fpull\u002F48788","https:\u002F\u002Fgithub.com\u002Fnextcloud\u002Fserver\u002Fpull\u002F48992","https:\u002F\u002Fhackerone.com\u002Freports\u002F2602973",0.62,0.00537,0.4494,false,null,{"timestamp":208,"automatable":209,"tech_impact":210,"exploitation":211,"cisa_decision":212,"cisa_remediation_timeline":216},"2024-11-15T17:31:20.910406Z","no","partial","none",{"vector":213,"decision":214,"priority":215},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T21:36:32.813165\u002F","track_star","medium","60D",[218],{"name":219,"source":220,"tactics":221,"technique_id":223},"Exploit Public-Facing Application","attack_vector",[222],"initial-access","T1190",[225],{"link":201}]