PT-2023-24200 · Nextcloud+1 · Nextcloud Calendar+1

Themarkib · Publicado 2023-02-01 · Atualizado 2025-04-17 · CVE-2023-33183

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Calendar app versions prior to 3.5.5 Nextcloud Calendar app versions prior to 4.2.3

Description The issue concerns the disclosure of internal website paths when the SMTP server is unavailable. This affects the functionality of the Calendar app in syncing events across devices.

Recommendations For versions prior to 3.5.5, update to version 3.5.5. For versions prior to 4.2.3, update to version 4.2.3.

Exploit

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

BDU:2025-05130

CVE-2023-33183

GHSA-2792-2734-HR7J

Produtos afetados

Nextcloud Calendar

Red Os

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/33xxx/CVE-2023-33183.json · Exploit
• https://github.com/nextcloud/calendar/pull/4938 · Correção
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2792-2734-hr7j · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-33183 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-33183 · Nota de Segurança
• https://t.me/cvenotify/51347 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2025-05130 · Nota de Segurança
• https://t.me/cvenotify/51780 · Publicação no Telegram
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-nextcloud-app-calendar-cve-2023-33183 · Nota