CVE-2025-66546

{"id": "CVE-2025-66546", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-66546", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-05T18:32:11.684776Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"status": "affected", "version": ">= 6.0.0-rc.1, < 6.0.1"}, {"status": "affected", "version": ">= 5.0.0-rc.1, < 5.5.6"}, {"status": "affected", "version": ">= 3.0.0-beta1, < 4.7.19"}]}]}], "published": "2025-12-05T17:16:05.163", "references": [{"url": "https://github.com/nextcloud/calendar/commit/f41650c3681fc4a4130eb883f5c0899c011326b3", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nextcloud/calendar/pull/7537", "tags": ["Issue Tracking"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7x2j-2674-fj95", "tags": ["Patch", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://hackerone.com/reports/3275810", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.19, 5.5.6, and 6.0.1, the calendar app allowed blindly booking appointments with a squential ID without known the appointment token. This vulnerability is fixed in 4.7.19, 5.5.6, and 6.0.1."}, {"lang": "es", "value": "Nextcloud Calendar es una aplicaci\u00f3n de calendario para Nextcloud. Versiones anteriores a?4.7.19,?5.5.6 y?6.0.1, la aplicaci\u00f3n de calendario permit\u00eda reservar citas ciegamente con un ID secuencial sin conocer el token de la cita. Esta vulnerabilidad est\u00e1 corregida en?4.7.19,?5.5.6 y?6.0.1."}], "lastModified": "2026-10-18T14:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nextcloud:calendar:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84E1FFC4-516D-4680-9F67-E66C1FAE5E0B", "versionEndExcluding": "4.7.19", "versionStartIncluding": "4.0.0"}, {"criteria": "cpe:2.3:a:nextcloud:calendar:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E716F13-981B-49BA-98FF-3B52C9962EA2", "versionEndExcluding": "5.5.6", "versionStartIncluding": "5.0.0"}, {"criteria": "cpe:2.3:a:nextcloud:calendar:6.0.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5FEEB806-FB4C-42B4-BE4E-297AB95A854F"}, {"criteria": "cpe:2.3:a:nextcloud:calendar:6.0.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1A878DF-8A9B-4987-8E2C-6873CA2C8427"}, {"criteria": "cpe:2.3:a:nextcloud:calendar:6.0.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B9884CA-4E88-4AB3-BA37-FAF9E845F04E"}, {"criteria": "cpe:2.3:a:nextcloud:calendar:6.0.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "032400B7-AE78-467F-81CC-83164AC29796"}, {"criteria": "cpe:2.3:a:nextcloud:calendar:6.0.0:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1A265F6-884F-44FF-B00F-CB5F7E704E0E"}, {"criteria": "cpe:2.3:a:nextcloud:calendar:6.0.0:rc5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8249ACE0-0485-4485-B628-D157E57A91C0"}, {"criteria": "cpe:2.3:a:nextcloud:calendar:6.0.0:rc6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "508556C9-5596-42B5-AD76-8156A42FEED7"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}