Medium severity6.3NVD Advisory· Published Nov 15, 2024· Updated Jun 17, 2026

CVE-2024-52511

Description

Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no access to. It is recommended that the Nextcloud Tables is upgraded to 0.8.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Tables2 versions
cpe:2.3:a:nextcloud:tables:*:*:*:*:*:nextcloud:*:*+ 1 more
- cpe:2.3:a:nextcloud:tables:*:*:*:*:*:nextcloud:*:*range: >=0.6.0,<0.8.0
- (no CPE)range: >=0.8.0
Nextcloud/security-advisoriescpe-rescue
Range: >= 0.6.0, < 0.8.0

Patches

Vulnerability mechanics

References

github.com/nextcloud/tables/commit/52846ad81fe192ee977f14c82a229b0d9cdc406cnvdPatch
github.com/nextcloud/security-advisories/security/advisories/GHSA-4qqp-9h2g-7qg7nvdVendor Advisory
github.com/nextcloud/tables/pull/1351nvdIssue Tracking
hackerone.com/reports/2671404nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000