MEDIUM🇵🇱 Wersja polska

CVE-2025-66551

CVSS 6.3v3.1pub. 2025-12-05upd. 2025-12-09

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L

Nextcloud Tables
APP
Nextcloud
0.4.0 – 0.8.6 (bez)0.9.0 – 0.9.3 (bez)

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

CWE-639

References

github.com/nextcloud/security-advisories/security/advis…

github.com/nextcloud/tables/commit/39f24a62fb41fd7a8bda…

github.com/nextcloud/tables/pull/1810…

hackerone.com/reports/3137895…

Related vulnerabilities

CVE-2026-45545HIGH8.2ten sam produkt

Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to befo...

CVE-2026-45722HIGH7.1ten sam produkt

Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to ...

CVE-2026-45544MEDIUM4.3ten sam produkt

Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the vi...

CVE-2025-66553MEDIUM4.3ten sam produkt

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authe...

CVE-2025-66513MEDIUM4.3ten sam produkt

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0....