CVE-2025-47794
- Source
- https://cve.org/CVERecord?id=CVE-2025-47794
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-47794.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-47794
- Aliases
-
- GHSA-q568-2933-gcjq
- Published
- 2025-05-16T14:35:25.280Z
- Modified
- 2026-08-08T03:32:08.383229067Z
- Severity
-
- 2.6 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission
- Details
-
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may read temporary files from Nextcloud running with a different user account, or run a symlink attack. Nextcloud Server versions 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1 fix the issue. No known workarounds are available.
- Database specific
{ "cwe_ids": [ "CWE-284" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47794.json", "cna_assigner": "GitHub_M", "unresolved_ranges": [ { "extracted_events": [ { "introduced": "26.0.0" }, { "fixed": "26.0.13.13" }, { "introduced": "27.0.0" }, { "fixed": "27.1.11.13" }, { "introduced": "28.0.0" }, { "fixed": "28.0.14.4" } ], "source": "AFFECTED_FIELD" } ] }- References
-
- https://hackerone.com/reports/1960647
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47794.json
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-q568-2933-gcjq
- https://nvd.nist.gov/vuln/detail/CVE-2025-47794
- https://github.com/nextcloud/server/pull/51194
Affected packages
Git / github.com/nextcloud/server
Affected ranges
- Type
- GIT
- Repo
- https://github.com/nextcloud/server
- Events
- Database specific
-
Show details
{ "cpe": [ "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*", "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*" ], "extracted_events": [ { "introduced": "29.0.0" }, { "fixed": "29.0.13" }, { "introduced": "30.0.0" }, { "fixed": "30.0.7" }, { "introduced": "31.0.0" }, { "fixed": "31.0.1" } ], "source": "CPE_RANGE" }
Affected versions
v29.*
v29.0.0
v29.0.1
v29.0.10
v29.0.10rc1
v29.0.11
v29.0.11rc1
v29.0.12
v29.0.12rc1
v29.0.12rc2
v29.0.13rc1
v29.0.13rc2
v29.0.1rc1
v29.0.2
v29.0.2rc1
v29.0.2rc2
v29.0.3
v29.0.3rc1
v29.0.3rc2
v29.0.3rc3
v29.0.3rc4
v29.0.4
v29.0.4rc1
v29.0.5
v29.0.5rc1
v29.0.6
v29.0.6rc1
v29.0.7
v29.0.7rc1
v29.0.8
v29.0.8rc1
v29.0.9
v29.0.9rc1
v29.0.9rc2
v30.*
v30.0.0
v30.0.1
v30.0.1rc1
v30.0.1rc2
v30.0.2
v30.0.2rc1
v30.0.2rc2
v30.0.3
v30.0.3rc1
v30.0.3rc2
v30.0.4
v30.0.4rc1
v30.0.5
v30.0.5rc1
v30.0.6
v30.0.6rc1
v30.0.6rc2
v30.0.7rc1
v30.0.7rc2
v31.*
v31.0.0
v31.0.1rc1
v31.0.1rc2