CVE-2023-33183

LOW

2.6

Description

Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4.2.3

Details CVE

Score CVSS v3.12.6

SeveriteLOW

Vecteur CVSSCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteHIGH

Privileges requisLOW

Interaction utilisateurREQUIRED

Publie5/30/2023

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

nextcloud:calendar

Faiblesses (CWE)

CWE-285

References

https://github.com/nextcloud/calendar/pull/4938(security-advisories@github.com)

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2792-2734-hr7j(security-advisories@github.com)

https://github.com/nextcloud/calendar/pull/4938(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2792-2734-hr7j(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.