Filtered by vendor Nextcloud Subscriptions
Filtered by product Approval Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-66515 1 Nextcloud 1 Approval 2025-12-05 2.7 Low
The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access to the file by using the numeric file id. This vulnerability is fixed in 1.3.1 and 2.5.0.