Threats Tagged 'cve-2025-59788'

CVE-2025-59788 is a cross-site scripting (XSS) vulnerability affecting the PDF viewer component of Nextcloud in multiple versions prior to specified patch releases. The vulnerability exists in a reachable example directory (files_pdfviewer) and allows an attacker to execute arbitrary JavaScript in the context of a user's browser by delivering a crafted PDF file to viewer.html. This can lead to session hijacking, credential theft, or other malicious actions within the user's session. Although no known exploits are currently reported in the wild, the vulnerability is related to a previous XSS issue (CVE-2024-4367), indicating a recurring weakness in the PDF viewer. European organizations using affected Nextcloud versions are at risk, especially those relying heavily on Nextcloud for document collaboration and storage. Mitigation requires updating to the fixed versions as soon as they become available and restricting access to example directories. Countries with high Nextcloud adoption and significant cloud collaboration usage, such as Germany, France, and the Netherlands, are most likely to be impacted. Given the ease of exploitation and potential impact on confidentiality and integrity without requiring authentication, this vulnerability is assessed as high severity.

HighVulnerabilityGermanyFranceNetherlands+4#cve#cve-2025-59788