CVE-2025-66545 in Groupfolders

Resumen

por MITRE • 2025-12-05

Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash bin. This vulnerability is fixed in 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: GitHub M
• Reservar: 2025-12-04
• Divulgación: 2025-12-05
• Moderación: aceptado
• Artículo: VDB-334547
• CPE: listo
• CWE: CWE-707 (confirmado)
• CVSS: 4.3 (NVD)
• EPSS: 0.00244
• KEV: no
• Actividades: muy bajo
• Sector: Insurance, Pharma, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-66545
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-66545
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-66545/