CVE-2024-22401

creationtimestamp| type| source ---|---|--- 2024-01-18 22:21:34+00:00| seen| https://t.me/ctinow/169967 2024-02-12 14:41:45+00:00| seen| https://t.me/ctinow/183120...

CVE-2024-22401

The CVE-2024-22401 issue affects the Nextcloud Guests app, where non-admin users could alter the allowed-list of apps, enabling use of unintended apps. Affected Nextcloud Guests versions include prior to 2.4.1, prior to 2.5.1, and prior to 3.0.1. Upgrades to 2.4.1, 2.5.1, or 3.0.1 are recommended...

CVE-2024-22401 All users can reset the allowed apps list for Nextcloud Guest App users

Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users could change the allowed list of apps, allowing them to use apps that were not intended to be used. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or...