CVE-2024-37316: Nextcloud Calendar

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Nextcloud Calendar is a calendar app for Nextcloud. Authenticated users could create an event with manipulated attachment data leading to a bad redirect for participants when clicked. It is recommended that the Nextcloud Calendar App is upgraded to 4.6.8 or 4.7.2.

Affected products

• Nextcloud Calendar: from 4.3.0, before 4.6.8 (fixed in 4.6.8)

Published 2024-06-14. Last modified 2026-06-17.