PT-2023-18522 · Nextcloud · Nextcloud Deck

Errorr0X01 + 1 · Publicado 2023-01-14 · Atualizado 2023-01-24 · CVE-2023-22470

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Baixa

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Nextcloud Deck versions prior to 1.6.5 Nextcloud Deck versions prior to 1.7.3 Nextcloud Deck versions prior to 1.8.2

Description Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error can be generated, potentially causing a denial of service when performed multiple times.

Recommendations For versions prior to 1.6.5, upgrade to version 1.6.5 or later. For versions prior to 1.7.3, upgrade to version 1.7.3 or later. For versions prior to 1.8.2, upgrade to version 1.8.2 or later.

Exploit

Correção

Resource Exhaustion

RCE

Enumeração de Fraquezas

CWE-400

CWE-20

Identificadores relacionados

CVE-2023-22470

GHSA-93J5-WX4C-6G88

Produtos afetados

Nextcloud Deck

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22470.json · Exploit
• https://github.com/nextcloud/deck/pull/4059 · Correção
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-93j5-wx4c-6g88 · Nota
• https://osv.dev/vulnerability/CVE-2023-22470 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-22470 · Nota de Segurança
• https://t.me/cvenotify/42710 · Publicação no Telegram