Vulnerabilities (CVE)

Filtered by vendor Nextcloud Subscribe
Filtered by product Approval
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-66515 1 Nextcloud 1 Approval 2025-12-09 N/A 2.7 LOW
The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access to the file by using the numeric file id. This vulnerability is fixed in 1.3.1 and 2.5.0.