CVE-2025-58051
Last modified
CVE-2025-58051 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leaked to the user. EPSS estimates a 0.48% chance of exploitation in the next 30 days.
Description
Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leaked to the user. It is recommended that the Nextcloud Tables app is upgraded to 0.7.6, 0.8.8 or 0.9.5.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-58051?
How severe is CVE-2025-58051?
How do I fix CVE-2025-58051?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-58046Dataease is an open-source data visualization and analysis p…9.8
- CVE-2025-58047Volto is a React based frontend for the Plone Content Manage…7.5
- CVE-2025-58048Paymenter is a free and open-source webshop solution for hos…9.9
- CVE-2025-58049XWiki Platform is a generic wiki platform offering runtime s…7.5
- CVE-2025-5805Missing Authorization vulnerability in Ninetheme Electron el…6.5
- CVE-2025-58050The PCRE2 library is a set of C functions that implement reg…9.1
- CVE-2025-58052Galette is a membership management web application for non p…8.1
- CVE-2025-58053Galette is a membership management web application for non p…9.8
- CVE-2025-58054Discourse is an open-source community discussion platform. V…5.4
- CVE-2025-58055Discourse is an open-source community discussion platform. I…4.3
- CVE-2025-58056Netty is an asynchronous event-driven network application fr…7.5
- CVE-2025-58057Netty is an asynchronous event-driven network application fr…7.5
Are you affected by CVE-2025-58051?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST