CVE-2024-52520 - Nextcloud Server Open Graph Out-of-Bounds Archive Retrieval

CVE ID : CVE-2024-52520
Published : Nov. 15, 2024, 5:15 p.m. | 24 minutes ago
Description : Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downloading bigger websites than intended, to find open-graph data. It is recommended that the Nextcloud Server is upgraded to 28.0.10 or 29.0.7 and Nextcloud Enterprise Server is upgraded to 27.1.11.8, 28.0.10 or 29.0.7.
Severity: 5.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...