CVE-2025-66513

MediumCVSS 5.3/10Last modified Oct 15, 2026

Description

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the information which table (numeric ID) is shared with which groups or users and the respective permissions was not limited to privileged users. This vulnerability is fixed in 0.8.9, 0.9.6, and 1.0.1.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-639

Affected software

Vendor	Product	Versions
nextcloud	security-advisories	>= 1.0.0-beta.1, < 1.0.1; >= 0.9.0-beta.1, < 0.9.6; < 0.8.9

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2cwj-qp49-4xfwPatch, Vendor Advisory
https://github.com/nextcloud/tables/commit/b92b9560b1e70a02b103a7aeb9e22e2ab5231873Patch
https://github.com/nextcloud/tables/pull/2148Issue Tracking, Patch
https://hackerone.com/reports/3334165Issue Tracking, Vendor Advisory

Timeline

Published: Dec 5, 2025
Last modified: Oct 15, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-665145.4Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injection in the Mail app's CVE-2025-665152.7The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as CVE-2025-665169.8Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms al CVE-2025-665188.8Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allow CVE-2025-665195.4A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can CVE-2025-66523.3PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d CVE-2025-665205.4A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com). User-CVE-2025-665215.4A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload c CVE-2025-665225.4A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com CVE-2025-665236.1URL parameters are directly embedded into JavaScript code or HTML attributes without proper encoding or sanitization. This allows attackers CVE-2025-665248.8Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache C CVE-2025-665254.3Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allows Exploiting Incorrectly Configured Acce