MEDIUM🇵🇱 Wersja polska

CVE-2025-66553

CVSS 4.3v3.1pub. 2025-12-05upd. 2025-12-09

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authenticated users were able to view meta data of columns in other tables of the Tables app by modifying the numeric ID in a request. This vulnerability is fixed in 0.8.7 and 0.9.4.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Nextcloud Tables
APP
Nextcloud
0.8.0 – 0.8.7 (bez)0.9.0 – 0.9.4 (bez)

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

CWE-639

References

github.com/nextcloud/security-advisories/security/advis…

github.com/nextcloud/tables/commit/e975f5bfedb6922f04cd…

github.com/nextcloud/tables/pull/1891…

hackerone.com/reports/3138721…

Related vulnerabilities

CVE-2026-45545HIGH8.2ten sam produkt

Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to befo...

CVE-2026-45722HIGH7.1ten sam produkt

Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to ...

CVE-2026-45544MEDIUM4.3ten sam produkt

Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the vi...

CVE-2025-66551MEDIUM6.3ten sam produkt

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a mal...

CVE-2025-66513MEDIUM4.3ten sam produkt

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0....