PT-2023-19313 · Nextcloud+2 · Nextcloud Desktop Client+2

Matuhn + 1 · Published 2023-02-06 · Updated 2023-08-30 · CVE-2023-23942

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Desktop Client versions prior to 3.6.3

Description The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. It is missing sanitisation on qml labels used for basic HTML elements such as strong, em, and head lines in the UI of the desktop client. The lack of sanitisation may allow for javascript injection.

Recommendations For versions prior to 3.6.3, upgrade to version 3.6.3 to resolve the issue. As a temporary workaround, consider restricting the use of qml labels in the desktop client until a patch is available. However, since there are no known workarounds for this issue, upgrading to the recommended version is the best course of action.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2023-2019

ALT-PU-2023-4584

ALT-PU-2023-5197

CVE-2023-23942

GHSA-64QC-VF6V-8XGG

OPENSUSE-SU-2023:0090-1

OPENSUSE-SU-2023:0171-1

Affected Products

Alt Linux

Debian

Nextcloud Desktop Client

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/23xxx/CVE-2023-23942.json · Exploit
• https://github.com/nextcloud/desktop/pull/5233 · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-64qc-vf6v-8xgg · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2023:0171-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-23942 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-23942 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-23942 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23942 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23942 · Security Note
• https://ubuntu.com/security/CVE-2023-23942 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-23942 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2023:0090-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2022-39334 · Note
• https://bugzilla.suse.com/1205799 · Note
• https://bugzilla.suse.com/1205798 · Note