DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Nextcloud: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-08-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Denial of Service zu verursachen, Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-39963US | high7.8 | — | ||
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8,… | ||||
| CVE-2023-39962US | high7.7 | — | ||
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14,… | ||||
| CVE-2023-39961US | medium4.3 | — | ||
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with… | ||||
| CVE-2023-39959US | medium5.3 | — | ||
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated us… | ||||
| CVE-2023-39958US | medium5.3 | — | ||
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0… | ||||
| CVE-2023-39957US | high7.8 | — | ||
Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to version 17.0.0, an unprotected intend allowed malicious third party apps t… | ||||
| CVE-2023-39955US | medium6.1 | — | ||
Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note file with HTML, the content is r… | ||||
| CVE-2023-39954US | high8.1OT erhöht | — | ||
user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, an attacker that obtained at le… | ||||
| CVE-2023-39953US | medium4.8 | — | ||
user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, missing verification of the iss… | ||||
| CVE-2023-39952US | medium6.5 | — | ||
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Nextcloud Security Advisory vom 2023-08-09external
- Nextcloud Security Advisory vom 2023-08-09external
- Nextcloud Security Advisory vom 2023-08-09external
- Nextcloud Security Advisory vom 2023-08-09external
- Nextcloud Security Advisory vom 2023-08-09external
- Nextcloud Security Advisory vom 2023-08-09external
- Nextcloud Security Advisory vom 2023-08-09external
- Nextcloud Security Advisory vom 2023-08-09external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan