4.3Orta
CVE-2026-45544Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService
Açıklama
Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users with read-only permissions in Nextcloud Tables. This issue has been patched in versions 1.0.4 and 2.0.0.
Zayıflık türü (CWE):
CWE-1230
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| nextcloud | security-advisories | >= 0.8.0, < 1.0.4 | |
| nextcloud | tables | 0.8.0 – < 1.0.4 |
Kaynaklar ve yamalar
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vvxm-6jjp-m9mp MitigationVendor Advisory
- https://github.com/nextcloud/tables/pull/2312 Issue TrackingPatch
- https://hackerone.com/reports/3483753
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:nextcloud:tables:*:*:*:*:*:nextcloud:*:*≥ 0.8.0 < 1.0.4