CVE-2024-37314 Information

Description

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

Reference

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9chh-5prm-wp43 https://github.com/nextcloud/photos/pull/1749 https://hackerone.com/reports/1946298