Disabled download shares still allow download through preview images
Package
Server
(Nextcloud)
Affected versions
< 24.0.7, < 25.0.1
Patched versions
24.0.7, 25.0.1
Server
(Nextcloud Enterprise)
< 24.0.7, < 25.0.1
24.0.7, 25.0.1
Impact
Images could be downloaded and previews of documents (first page) can be downloaded without being watermarked.
Patches
It is recommended that the Nextcloud Server is upgraded to 24.0.7 or 25.0.1
It is recommended that the Nextcloud Enterprise Server is upgraded to 24.0.7 or 25.0.1
Workarounds
No workaround available
References
For more information
If you have any questions or comments about this advisory: