CVE-2025-66515 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a wo…
Low CVSS: 2.7

CVE-2025-66515

The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access to the file by using the numeric file id. This vulnerability is fixed in 1.3.1 and 2.5.0.
Vendor
Nextcloud
Product
Approval
CWE
CWE-287
Yayın Tarihi
2025-12-05 18:15:57
Güncelleme
2025-12-09 17:22:18
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-287 Approval LOW Nextcloud 2025

Referanslar

https://github.com/nextcloud/approval/commit/e30b56b7832255311ac800b7875f44866e88fff4 https://github.com/nextcloud/approval/pull/334 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-q26g-fmjq-x5g5 https://hackerone.com/reports/3338748