CVE-2025-66550
Medium · 5.7CVSS
5.7
EPSS
0.3%
Published
Dec 5, 2025
CISA due date
—
The record
Nextcloud Calendar attachments of local files are offered to downloaded
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-73785 A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow… CWE-241
- CVE-2026-47110 Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that… CWE-241
- CVE-2025-63548 An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a… CWE-241
- CVE-2025-7339 on-headers is a node.js middleware for listening to when a response writes headers. CWE-241