gsd-2023-49792
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a (reverse) proxy is configured as trusted proxy the server could be tricked into reading a wrong remote address for an attacker, allowing them executing authentication attempts than intended. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available.
Aliases
Aliases
CVE-2023-49792


To clipboard 

{
  "GSD": {
    "alias": "CVE-2023-49792",
    "id": "GSD-2023-49792"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-49792"
      ],
      "details": "Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a (reverse) proxy is configured as trusted proxy the server could be tricked into reading a wrong remote address for an attacker, allowing them executing authentication attempts than intended. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available.",
      "id": "GSD-2023-49792",
      "modified": "2023-12-13T01:20:34.867415Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security-advisories@github.com",
        "ID": "CVE-2023-49792",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "security-advisories",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "\u003e= 23.0.0, \u003c 23.0.12.13"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "\u003e= 24.0.0, \u003c 24.0.12.9"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "\u003e= 25.0.0, \u003c 25.0.13.4"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "\u003e= 26.0.0, \u003c 26.0.9"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "\u003e= 27.0.0, \u003c 27.1.4"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "nextcloud"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a (reverse) proxy is configured as trusted proxy the server could be tricked into reading a wrong remote address for an attacker, allowing them executing authentication attempts than intended. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-307",
                "lang": "eng",
                "value": "CWE-307: Improper Restriction of Excessive Authentication Attempts"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5j2p-q736-hw98",
            "refsource": "MISC",
            "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5j2p-q736-hw98"
          },
          {
            "name": "https://github.com/nextcloud/server/pull/41526",
            "refsource": "MISC",
            "url": "https://github.com/nextcloud/server/pull/41526"
          },
          {
            "name": "https://hackerone.com/reports/2230915",
            "refsource": "MISC",
            "url": "https://hackerone.com/reports/2230915"
          }
        ]
      },
      "source": {
        "advisory": "GHSA-5j2p-q736-hw98",
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "0F8E7D0E-96C0-423D-BCCB-0C4CA37C3EA7",
                    "versionEndExcluding": "23.0.12.13",
                    "versionStartIncluding": "23.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "D26A27E2-D4E5-4028-8C16-2956094F9DAC",
                    "versionEndExcluding": "24.0.12.9",
                    "versionStartIncluding": "24.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "B7B7713B-F08A-4772-B0B7-81A14E189B5C",
                    "versionEndExcluding": "25.0.13.4",
                    "versionStartIncluding": "25.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
                    "matchCriteriaId": "2A2A5F1D-BBCC-4246-A486-719A2A3C0315",
                    "versionEndExcluding": "26.0.9",
                    "versionStartIncluding": "26.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "AE6D3891-AC1C-403C-9DAB-8036D6114068",
                    "versionEndExcluding": "26.0.9",
                    "versionStartIncluding": "26.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
                    "matchCriteriaId": "1C7A7798-35A1-45A4-9E18-C37ADFC668E3",
                    "versionEndExcluding": "27.1.4",
                    "versionStartIncluding": "27.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "75E8F82C-08F6-429B-8F06-59F099B78170",
                    "versionEndExcluding": "27.1.4",
                    "versionStartIncluding": "27.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a (reverse) proxy is configured as trusted proxy the server could be tricked into reading a wrong remote address for an attacker, allowing them executing authentication attempts than intended. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available."
          },
          {
            "lang": "es",
            "value": "Nextcloud Server proporciona almacenamiento de datos para Nextcloud, una plataforma en la nube de c\u00f3digo abierto. En Nextcloud Server anteriores a las versiones 26.0.9 y 27.1.4; as\u00ed como Nextcloud Enterprise Server anteriores a las versiones 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9 y 27.1.4; cuando un proxy (inverso) se configura como proxy confiable, se podr\u00eda enga\u00f1ar al servidor para que lea una direcci\u00f3n remota incorrecta para un atacante, permiti\u00e9ndole ejecutar intentos de autenticaci\u00f3n de los previstos. Las versiones 26.0.9 y 27.1.4 de Nextcloud Server y las versiones 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9 y 27.1.4 de Nextcloud Enterprise Server contienen un parche para este problema. No hay soluciones conocidas disponibles."
          }
        ],
        "id": "CVE-2023-49792",
        "lastModified": "2024-01-03T14:29:18.610",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "security-advisories@github.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2023-12-22T17:15:08.880",
        "references": [
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5j2p-q736-hw98"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/nextcloud/server/pull/41526"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Permissions Required"
            ],
            "url": "https://hackerone.com/reports/2230915"
          }
        ],
        "sourceIdentifier": "security-advisories@github.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-307"
              }
            ],
            "source": "security-advisories@github.com",
            "type": "Primary"
          }
        ]
      }
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.