DeutschShown in its original language — a full translation is planned for a future version.
Nextcloud: Mehrere Schwachstellen
view advisory published 2023-02-05
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud bezüglich des Desktop-Clients und der Mail-Komponente ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-23943US | medium4.3 | — | ||
Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve host fields allowed to scan for internal services and servers r… | ||||
| CVE-2023-23942US | medium6.1 | — | ||
The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisation on qml labels which are use… | ||||
| CVE-2023-23944US | medium6.5OT elevated | — | ||
Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the database during the duration of O… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan