CVE-2024-22402

CVE-2024-22402 concerns the Nextcloud Guests app. The issue is an improper handling of request URLs that lets guest users load pages of apps they should not access, effectively bypassing the app allowlist. Affected Nextcloud Guests versions include 2.4.x, 2.5.x, and 3.0.x (with mitigation guidanc...

CVE-2024-22401

The CVE-2024-22401 issue affects the Nextcloud Guests app, where non-admin users could alter the allowed-list of apps, enabling use of unintended apps. Affected Nextcloud Guests versions include prior to 2.4.1, prior to 2.5.1, and prior to 3.0.1. Upgrades to 2.4.1, 2.5.1, or 3.0.1 are recommended...