CVE-2024-37316

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Nextcloud Calendar is a calendar app for Nextcloud. Authenticated users could create an event with manipulated attachment data leading to a bad redirect for participants when clicked. It is recommended that the Nextcloud Calendar App is upgraded to 4.6.8 or 4.7.2.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-241

Affected software

VendorProductVersions
nextcloudsecurity-advisories>= 4.3.0, < 4.6.8; >= 4.7.0, < 4.7.2

References

Timeline

Published
Jun 14, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-373174.6The Nextcloud Notes app is a distraction free notes taking app for Nextcloud. If an attacker managed to share a folder called `Notes/` with CVE-2024-373188.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373198.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37325.4The GeoDirectory – WordPress Business Directory Plugin, or Classified Directory plugin for WordPress is vulnerable to Stored Cross-Site ScriCVE-2024-373208.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373218.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373228.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373238.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373248.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373258.1Azure Science Virtual Machine (DSVM) Elevation of Privilege VulnerabilityCVE-2024-373268.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373278.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-37316: Medium severity, CVSS 4.6 | Vulnix