💣Exploit CVE-2024-52521 - Nextcloud Server Background Job Collider Vulnerability

[Maksim]

CVE ID : CVE-2024-52521
Published : Nov. 15, 2024, 5:15 p.m. | 24 minutes ago
Description : Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely being identified as already existing and not be queued for execution. By changing the Hash to SHA256 the probability was heavily decreased. It is recommended that the Nextcloud Server is upgraded to 28.0.10, 29.0.7 or 30.0.0.
Severity: 2.6 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.