Vulnerability · Published Nov 21, 2023 · Assigned by GitHub_M
CVE-2023-48302Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V
Low 3.5
In plain English
A low-severity cross-site scripting in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Official description
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, when a user is tricked into copy pasting HTML code without markup (Ctrl+Shift+V) the markup will actually render. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app text.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | >= 25.0.0, < 25.0.13>= 26.0.0, < 26.0.8>= 27.0.0, < 27.1.3 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p7g9-x25m-4h87 x_refsource_CONFIRM
- https://github.com/nextcloud/text/pull/4877 x_refsource_MISC
- https://hackerone.com/reports/2211561 x_refsource_MISC