PT-2023-20176 · Nextcloud+1 · Nextcloud+1

Nickvergessen · Publicado 2023-01-16 · Atualizado 2023-04-03 · CVE-2023-25579

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Nextcloud server versions prior to 25.0.2 Nextcloud server versions prior to 24.0.8 Nextcloud server versions prior to 23.0.12

Description The issue concerns the OCFilesNodeFolder::getFullPath() function, which was validating and normalizing strings in the wrong order. This function is used in the newFile() and newFolder() items, potentially allowing the creation of paths outside of one's own space and overwriting data from other users with crafted paths.

Recommendations For versions prior to 25.0.2, upgrade to version 25.0.2 or later. For versions prior to 24.0.8, upgrade to version 24.0.8 or later. For versions prior to 23.0.12, upgrade to version 23.0.12 or later.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

ALT-PU-2023-1055

ALT-PU-2023-1176

CVE-2023-25579

GHSA-273V-9H7X-P68V

OPENSUSE-SU-2023:0083-1

Produtos afetados

Alt Linux

Nextcloud

Referências · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25579.json · Exploit
• https://github.com/nextcloud/server/pull/35074 · Correção
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-273v-9h7x-p68v · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2022-35931 · Nota
• https://bugzilla.suse.com/1203190 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2023:0083-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-25579 · Nota de Segurança
• https://lists.opensuse.org/archives/list/[e-mail]/thread/M7E2FX5KGET4IYNWVYBLR7XYJMJ7SJD4 · Nota
• https://suse.com/security/cve/CVE-2023-25579 · Nota
• https://osv.dev/vulnerability/CVE-2023-25579 · Aviso do Fabricante
• https://bugzilla.suse.com/1208591 · Nota
• https://suse.com/security/cve/CVE-2022-39346 · Nota
• https://bugzilla.suse.com/1205802 · Nota