CVE-2024-37884
published 2024-06-14CVE-2024-37884: Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with…
PriorityP429medium5.4CVSS 3.1
AVNACLPRLUINSUCNILAL
EPSS
0.37%
29.9th percentile
Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It is recommended that the Nextcloud Server is upgraded to 26.0.12 or 27.1.7 or 28.0.3 and that the Nextcloud Enterprise Server is upgraded to 26.0.12 or 27.1.7 or 28.0.3.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nextcloud | nextcloud_server | >= 25.0.0 < 25.0.13.7 | 25.0.13.7 |
| nextcloud | nextcloud_server | >= 26.0.0 < 26.0.13 | 26.0.13 |
| nextcloud | nextcloud_server | >= 27.0.0 < 27.1.8 | 27.1.8 |
| nextcloud | nextcloud_server | >= 28.0.0 < 28.0.4 | 28.0.4 |
| nextcloud | security-advisories | — | — |
| nextcloud | security-advisories | — | — |
| nextcloud | security-advisories | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
Suricata
ET WEB_CLIENT Possible Microsoft Internet Explorer URI Validation Remote Code Execution Attempt
suricata·2010-07-30
CVE-2010-0027 ET WEB_CLIENT Possible Microsoft Internet Explorer URI Validation Remote Code Execution Attempt
ET WEB_CLIENT Possible Microsoft Internet Explorer URI Validation Remote Code Execution Attempt
Rule: alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Possible Microsoft Internet Explorer URI Validation Remote Code Execution Attempt"; flow:established,to_client; file.data; content:"#|3A|../../"; content:"C|3A 5C|"; nocase; within:50; pcre:"/\x2E\x2E\x2F\x2E\x2E\x2F.+C\x3A\x5C[a-z]/si"; reference:url,www.securityfocus.com/bid/37884; reference:cve,2010-0027; classtype:attempted-user; sid:2010798; rev:6; metadata:affected_product Web_Browsers, affected_product Web_Browser_Plugins, attack_target Client_Endpoint, created_at 2010_07_30, deployment Perimeter, confidence Medium, signature_severity Major, tag Web_Client_Attacks, updated_at 2024_04_10, mitre_tactic_id TA0001, mitre
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xwgx-f37p-xh8chttps://github.com/nextcloud/server/pull/43727https://hackerone.com/reports/2290680https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xwgx-f37p-xh8chttps://github.com/nextcloud/server/pull/43727https://hackerone.com/reports/2290680
2024-06-14
Published