CVE-2023-49791: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform

Medium severity · published Dec 22, 2023

CVE-2023-49791

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform

5.4

CVSS

0.6%

EPSS

On KEV

Description

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when an attacker manages to get access to an active session of another user via another way, they could delete and modify workflows by sending calls directly to the API bypassing the password confirmation shown in the UI. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Attack vector

Network

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

Low

Availability

Low

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.6% · higher than 49% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Nextcloud Server · Nextcloud

23.0.0 before 23.0.12.13; 24.0.0 before 24.0.12.9; 25.0.0 before 25.0.13.4; 26.0.0 before 26.0.9; 26.0.0 before 26.0.9; 27.0.0 before 27.1.4; +1 more · source: NVD

Affected product

Nextcloud Server

Nextcloud

All Nextcloud Server CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-49791

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-49791

Vendor Advisory

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3f8p-6qww-2prr

Patch

https://github.com/nextcloud/server/pull/41520

Permissions Required

https://hackerone.com/reports/2120667