Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-48301

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles.

Published

2023-11-21T22:15:07.490

Last Modified

2024-11-21T08:31:26.527

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.5 (LOW)

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nextcloud nextcloud_server ≤ 25.0.13 Yes
Application nextcloud nextcloud_server < 25.0.13 Yes
Application nextcloud nextcloud_server ≤ 26.0.8 Yes
Application nextcloud nextcloud_server < 26.0.8 Yes
Application nextcloud nextcloud_server ≤ 27.1.3 Yes
Application nextcloud nextcloud_server < 27.1.3 Yes
References