CVE-2024-22401

—

CVSS 3.1

4.3 medium

EPSS

<1%p39

Published

Jan 18, 2024 (Jan 18, 2024)

Modified

Jun 17, 2026

Description

Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users could change the allowed list of apps, allowing them to use apps that were not intended to be used. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or 3.0.1. There are no known workarounds for this vulnerability.

Vendors: nextcloud
Products: guests
Weakness: CWE-281
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.