CVE-2023-35171

MEDIO 6.1CVE-2023-35171 · Published 23/06/2023 · updated 17/06/2026

In breve

CVE-2023-35171 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda nextcloud server (nextcloud).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.59%, superiore al 48.4% delle vulnerabilità.
Correzione: aggiornare a 26.0.2 o successiva.

Package	Affected versions	Patched versions
nextcloud server nextcloud	`≥ 26.0.0, < 26.0.2`	`26.0.2`

Description

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supply a URL that redirects an unsuspecting victim from a legitimate domain to an attacker's site. Nextcloud Server and Nextcloud Enterprise Server 26.0.2 contain a patch for this issue. No known workarounds are available.

References

nextcloud/security-advisories security advisory · Exploit
nextcloud/server#38194 · Issue Tracking
hackerone.com/reports/1977222 · Exploit

Altre vulnerabilità di nextcloud server

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nextcloud server

nextcloud

≥ 26.0.0, < 26.0.2

26.0.2

Description

Altre vulnerabilità di nextcloud server

Vedi tutto →