CVE-2024-52517

🗓️ 15 Nov 2024 16:49:40Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 116 Views

Nextcloud Server vulnerability storing global credentials in plain text. Upgrade to recommended versions

Reporter	Title	Published	Views	Family All 51
BDU FSTEC	The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the insufficient protection of sensitive data, allowing attackers to influence privacy issues.	6 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-52517	15 Nov 202419:07	–	circl
CNNVD	Nextcloud 信息泄露漏洞	15 Nov 202400:00	–	cnnvd
CNVD	Nextcloud Information Disclosure Vulnerability (CNVD-2025-11221)	21 Nov 202400:00	–	cnvd
Cvelist	CVE-2024-52517 Nextcloud Server's global credentials of external storages are sent back to the frontend	15 Nov 202416:49	–	cvelist
EUVD	EUVD-2024-45931	3 Oct 202520:07	–	euvd
Nextcloud	Global credentials of external storages are sent back to the frontend	15 Nov 202413:18	–	nextcloud
Hacker One	Nextcloud: External storage - global credentials returned to the client side in plaintext	17 Jun 202408:43	–	hackerone
NVD	CVE-2024-52517	15 Nov 202417:15	–	nvd
OpenVAS	Nextcloud Server 28.x < 28.0.11, 29.x < 29.0.8, 30.x < 30.0.1 Multiple Vulnerabilities	21 Nov 202400:00	–	openvas

NVD

Vulners

Node

nextcloud nextcloud_serverRange25.0.0–25.0.13.13enterprise

nextcloud nextcloud_serverRange26.0.0–26.0.13.9enterprise

nextcloud nextcloud_serverRange27.0.0–27.1.11.9enterprise

nextcloud nextcloud_serverRange28.0.0–28.0.11

nextcloud nextcloud_serverRange28.0.0–28.0.11enterprise

nextcloud nextcloud_serverRange29.0.0–29.0.8

nextcloud nextcloud_serverRange29.0.0–29.0.8enterprise

nextcloud nextcloud_serverRange30.0.0–30.0.1

nextcloud nextcloud_serverRange30.0.0–30.0.1enterprise

[
  {
    "vendor": "nextcloud",
    "product": "security-advisories",
    "versions": [
      {
        "version": ">= 28.0.0, < 28.0.11",
        "status": "affected"
      },
      {
        "version": ">= 29.0.0, < 29.0.8",
        "status": "affected"
      },
      {
        "version": ">= 30.0.0, < 30.0.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/nextcloud/server/commit/c45ed55f959ff54f3ea23dd2ae1a5868a075c9fe
hackerone	www.hackerone.com/reports/2554079
github	www.github.com/nextcloud/security-advisories/security/advisories/GHSA-x9q3-c7f8-3rcg
github	www.github.com/nextcloud/server/pull/48359

06 Jan 2025 20:58Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.6 - 5.9

EPSS0.00746

SSVC

CWE-200