Vulnerability · Published Feb 24, 2023 · Assigned by GitHub_M
CVE-2023-25821Nextcloud download permissions can be changed by resharer
Medium 5.7
In plain English
A medium-severity improper access control in security-advisories from nextcloud. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)0.9%top 38.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improper Access Control. Secure view for internal shares can be circumvented if reshare permissions are also given. This issue is patched in versions 24.0.7 and 25.0.1. No workaround is available.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | >= 24.0.4, < 24.0.7>= 25.0.0, < 25.0.1 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w6h-5qgw-4j94 x_refsource_CONFIRM
- https://github.com/nextcloud/server/pull/34502 x_refsource_MISC
- https://hackerone.com/reports/1724016 x_refsource_MISC