CVE-2024-22402

Summary

CVE-2024-22402 affects the Nextcloud Guests app, allowing unauthorized users to access the first page of apps they shouldn't be able to see. This issue, which may result in permissions bypass, is particularly problematic for installations with a large number of apps. It is strongly advised to upgrade the Guests app to versions 2.4.1, 2.5.1, or 3.0.1 as soon as possible, as no known workarounds exist for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.