High severity · published Mar 22, 2023
CVE-2023-25820
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server software. In Nextcloud Server versions 25.0.x prior to 25.0.5 and versions 24.0.x prior to 24.0.10 as well as Nextcloud Enterprise Server versions 25.0.x prior to 25.0.4, 24.0.x prior to 24.0.10, 23.0.x prior to 23.0.12.5, 22.x prior to 22.2.0.10, and 21.x prior to 21.0.9.10, when an attacker gets access to an already logged in user session they can then brute force the password on the confirmation endpoint. Nextcloud Server should upgraded to 24.0.10 or 25.0.4 and Nextcloud Enterprise Server should upgraded to 21.0.9.10, 22.2.10.10, 23.0.12.5, 24.0.10, or 25.0.4 to receive a patch. No known workarounds are available.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Nextcloud Server · Nextcloud
21.0.0 before 21.0.9; 22.2.0 before 22.2.10.10; 23.0.0 before 23.0.12.5; 24.0.0 before 24.0.10; 24.0.0 before 24.0.10; 25.0.0 before 25.0.4; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-25820
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-25820
Vendor Advisory
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-36g6-wjx2-333x
Patch
https://github.com/nextcloud/server/pull/36489
Third Party Advisory
https://hackerone.com/reports/1842114
More from Nextcloud Server
9.8
CVE-2023-49792
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform
9.8
CVE-2023-48306
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform
9.8
CVE-2021-32802
Nextcloud server is an open source, self hosted personal cloud
9.8
CVE-2021-32726
Nextcloud Server is a Nextcloud package that handles data storage
9.8
CVE-2021-22915
Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations