CVE-2023-48307 — Server-Side Request Forgery in Mail

CWE-918 — Server-Side Request Forgery2 documents2 sources
Severity
9.8CRITICALNVD
CNA3.5
EPSS
0.2%
top 59.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nextcloud MailNextcloud Security-advisories
Timeline
PublishedNov 21

Description

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an attacker can use an unprotected endpoint in the Mail app to perform a SSRF attack. Nextcloud Mail app versions 2.2.8 and 3.3.0 contain a patch for this issue. As a workaround, disable the mail app.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDnextcloud/mail1.13.0 — 2.2.8+1
▶CVEListV5nextcloud/security-advisories>= 1.13.0, < 2.2.8, >= 3.1.0, < 3.3.0+1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

1
CVEList
Nextcloud Mail app vulnerable to Server-Side Request Forgery↗2023-11-21
▶
CVE-2023-48307 — Server-Side Request Forgery in Mail | cvebase