CVE-2024-37887 | Nextcloud Server up to 27.1.9/28.0.5/29.0.0 Calendar Event access control (GHSA-h4xv-cjpm-j595)

A vulnerability has been found in Nextcloud Server up to 27.1.9/28.0.5/29.0.0 and classified as critical. This vulnerability affects unknown code of the component Calendar Event Handler. The manipulation leads to improper access controls.

This vulnerability was named CVE-2024-37887. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.