Nextcloud Server up to 27.1.9/28.0.5/29.0.0 SVG Preview name resolution

Summaryinfo

A vulnerability has been found in Nextcloud Server up to 27.1.9/28.0.5/29.0.0 and classified as problematic. This issue affects some unknown processing of the component SVG Preview. Performing a manipulation results in name resolution. This vulnerability is known as CVE-2024-52515. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability classified as problematic has been found in Nextcloud Server up to 27.1.9/28.0.5/29.0.0. This affects an unknown part of the component SVG Preview. The manipulation with an unknown input leads to a name resolution vulnerability. CWE is classifying the issue as CWE-706. The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere. This is going to have an impact on confidentiality. The summary by CVE is:

Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file referencing paths. If the file would exist the preview of the SVG would preview the other file instead. It is recommended that the Nextcloud Server is upgraded to 27.1.10, 28.0.6 or 29.0.1 and Nextcloud Enterprise Server is upgraded to 24.0.12.15, 25.0.13.10, 26.0.13.4, 27.1.10, 28.0.6 or 29.0.1.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2024-52515 since 11/11/2024. The exploitability is told to be easy. It is possible to initiate the attack remotely. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.

Upgrading to version 24.0.12.15, 25.0.13.10, 26.0.13.4, 27.1.10, 28.0.6 or 29.0.1 eliminates this vulnerability. Applying the patch 7e1c30f82a63fbea8c269e0eec38291377f32604 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Cloud Software

Vendor

• Nextcloud

Name

• Server

Version

• 27.1.0
• 27.1.1
• 27.1.2
• 27.1.3
• 27.1.4
• 27.1.5
• 27.1.6
• 27.1.7
• 27.1.8
• 27.1.9
• 28.0.0
• 28.0.1
• 28.0.2
• 28.0.3
• 28.0.4
• 28.0.5
• 29.0

License

• open-source

Website

• Product: https://github.com/nextcloud/server/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion