PT-2023-2472 · Nextcloud+2 · Nextcloud Server+2

Nickvergessen · Publicado 2023-03-27 · Atualizado 2023-04-18 · CVE-2023-26482

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 24.0.10 Nextcloud Server versions prior to 25.0.4

Description The issue is related to a missing scope validation in the Nextcloud server, allowing users to create workflows designed for administrators only. Some workflows can lead to remote code execution (RCE) by invoking scripts, generating PDFs, or running scripts on the server. The combination of available apps can result in RCE.

Recommendations For Nextcloud Server versions prior to 24.0.10, upgrade to 24.0.10. For Nextcloud Server versions prior to 25.0.4, upgrade to 25.0.4. For users unable to upgrade, disable the workflow scripts and workflow pdf converter apps as a mitigation.

Exploit

Correção

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

ALT-PU-2023-1517

ALT-PU-2023-1547

BDU:2023-02262

CVE-2023-26482

GHSA-H3C9-CMH8-7QPJ

Produtos afetados

Alt Linux

Nextcloud Server

Red Os

Referências · 10

• 🔥 https://github.com/rapid7/metasploit-framework/commit/c598d8b4b00581ff801cdcb3e79f8de056adf6b8 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26482.json · Exploit
• https://github.com/nextcloud/server/commit/5a06b50b10cc9278bbe68bbf897a0c4aeb0c4e60 · Correção
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h3c9-cmh8-7qpj · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-02262 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-26482 · Nota de Segurança
• https://t.me/cibsecurity/61195 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-26482 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-cve-2023-28835-cve-2023-28833-cve-2023-28644-cve-2023-28643-cve · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-cve-2023-28835-cve-2023-28833-cve-2023-28644-cve-2023-28643-cve · Nota