Vulnerability · Published Dec 22, 2023 · Assigned by GitHub_M
CVE-2023-49792Bruteforce protection can be bypassed with misconfigured proxy
Medium 5.3
In plain English
A medium-severity security flaw in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a (reverse) proxy is configured as trusted proxy the server could be tricked into reading a wrong remote address for an attacker, allowing them executing authentication attempts than intended. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | >= 23.0.0, < 23.0.12.13>= 24.0.0, < 24.0.12.9>= 25.0.0, < 25.0.13.4>= 26.0.0, < 26.0.9>= 27.0.0, < 27.1.4 |
Weakness: CWE-307 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5j2p-q736-hw98 x_refsource_CONFIRM
- https://github.com/nextcloud/server/pull/41526 x_refsource_MISC
- https://hackerone.com/reports/2230915 x_refsource_MISC