PT-2023-2469 · Nextcloud+2 · Nextcloud Server+2

Ctuihu · Publicado 2023-03-27 · Atualizado 2023-04-18 · CVE-2023-28833

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 24.0.10 Nextcloud Server versions prior to 25.0.4

Description The issue is related to the lack of restrictions on file uploads in the Nextcloud server, allowing administrators to upload a logo or favicon with a maliciously named file, potentially overwriting files in the appdata directory. This could be exploited by tricking an administrator into uploading such a file. The vulnerability may allow a remote attacker to compromise the target system by uploading arbitrary files.

Recommendations For Nextcloud Server versions prior to 24.0.10, upgrade to version 24.0.10. For Nextcloud Server versions prior to 25.0.4, upgrade to version 25.0.4. As a temporary workaround for users unable to upgrade, avoid ingesting logo files from untrusted sources.

Exploit

Correção

Unrestricted File Upload

Path traversal

Enumeração de Fraquezas

CWE-434

CWE-22

Identificadores relacionados

ALT-PU-2023-1517

ALT-PU-2023-1547

BDU:2023-02259

CVE-2023-28833

GHSA-CH7F-PX7M-HG25

Produtos afetados

Alt Linux

Nextcloud Server

Red Os

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28833.json · Exploit
• https://github.com/nextcloud/server/pull/36095 · Correção
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-ch7f-px7m-hg25 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-cve-2023-28835-cve-2023-28833-cve-2023-28644-cve-2023-28643-cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-28833 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-28833 · Aviso do Fabricante
• https://t.me/cibsecurity/61198 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-02259 · Nota de Segurança
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-cve-2023-28835-cve-2023-28833-cve-2023-28644-cve-2023-28643-cve · Nota