Vulnerability · Published May 27, 2023 · Assigned by GitHub_M
CVE-2023-33184Blind SSRF in the Nextcloud Mail app on avatar endpoint
Low 3.5
In plain English
A low-severity server-side request forgery in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.5%top 55.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | < 1.15.3< 2.2.5< 3.02 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564 x_refsource_CONFIRM
- https://github.com/nextcloud/mail/pull/8275 x_refsource_MISC
- https://hackerone.com/reports/1913095 x_refsource_MISC