CVE-2025-58051
Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leaked to the user. It is recommended that the Nextcloud Tables app is upgraded to 0.7.6, 0.8.8 or 0.9.5.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.50%
- CWE
- CWE-841
- Published
- 2025-10-16
- Last modified
- 2026-03-13
Affected products
- nextcloud security-advisories
- nextcloud security-advisories
- nextcloud security-advisories
Weakness type
Related vulnerabilities
- CVE-2026-87503 — Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36...
- CVE-2026-53637 — Sylius: Cart FormComponent allows modification or deletion of an already-completed order
- CVE-2026-67279 — SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
- CVE-2026-82423 — macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
- CVE-2026-55763 — Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits
- CVE-2026-78103 — Dimension Log Server Configuration Lock Bypass Vulnerability
- CVE-2026-78618 — Dimension Business Logic Flaw Allows Chained Backend Object Operations
- CVE-2026-77508 — Weblate: Unverified REST API email changes