CVE-2024-37317

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

The Nextcloud Notes app is a distraction free notes taking app for Nextcloud. If an attacker managed to share a folder called `Notes/` with a newly created user before they logged in, the Notes app would use that folder store the personal notes. It is recommended that the Nextcloud Notes app is upgraded to 4.9.3.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-284CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-373188.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373198.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37325.4The GeoDirectory – WordPress Business Directory Plugin, or Classified Directory plugin for WordPress is vulnerable to Stored Cross-Site ScriCVE-2024-373208.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373218.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373228.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373238.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373248.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373258.1Azure Science Virtual Machine (DSVM) Elevation of Privilege VulnerabilityCVE-2024-373268.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373278.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-373288.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-37317: Medium severity, CVSS 4.6 | Vulnix