CVE-2025-66546
Nextcloud Calendar app allowed booking appointments without the generated token
Résumé
Nextcloud Calendar app allowed booking appointments without the generated token
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.19, 5.5.6, and 6.0.1, the calendar app allowed blindly booking appointments with a squential ID without known the appointment token. This vulnerability is fixed in 4.7.19, 5.5.6, and 6.0.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web hackerone.com