Low severity3.5NVD Advisory· Published Jun 14, 2024· Updated Jun 17, 2026
CVE-2024-37314
CVE-2024-37314
Description
Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.
Affected products
4- Range: before 25.0.7 or 26.0.2
- Range: >= 25.0.1, < 25.0.7
Patches
Vulnerability mechanics
References
3- github.com/nextcloud/photos/pull/1749nvdPatch
- github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43nvdVendor Advisory
- hackerone.com/reports/1946298nvdIssue Tracking
News mentions
0No linked articles in our index yet.