PT-2023-20176 · Nextcloud+1 · Nextcloud+1

Nickvergessen · Published 2023-01-16 · Updated 2023-04-03 · CVE-2023-25579

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Nextcloud server versions prior to 25.0.2 Nextcloud server versions prior to 24.0.8 Nextcloud server versions prior to 23.0.12

Description The issue concerns the OCFilesNodeFolder::getFullPath() function, which was validating and normalizing strings in the wrong order. This function is used in the newFile() and newFolder() items, potentially allowing the creation of paths outside of one's own space and overwriting data from other users with crafted paths.

Recommendations For versions prior to 25.0.2, upgrade to version 25.0.2 or later. For versions prior to 24.0.8, upgrade to version 24.0.8 or later. For versions prior to 23.0.12, upgrade to version 23.0.12 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2023-1055

ALT-PU-2023-1176

CVE-2023-25579

GHSA-273V-9H7X-P68V

OPENSUSE-SU-2023:0083-1

Affected Products

Alt Linux

Nextcloud

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25579.json · Exploit
• https://github.com/nextcloud/server/pull/35074 · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-273v-9h7x-p68v · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2023:0083-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25579 · Security Note
• https://osv.dev/vulnerability/CVE-2023-25579 · Vendor Advisory
• https://suse.com/security/cve/CVE-2022-35931 · Note
• https://bugzilla.suse.com/1203190 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/M7E2FX5KGET4IYNWVYBLR7XYJMJ7SJD4 · Note
• https://suse.com/security/cve/CVE-2023-25579 · Note
• https://bugzilla.suse.com/1208591 · Note
• https://suse.com/security/cve/CVE-2022-39346 · Note
• https://bugzilla.suse.com/1205802 · Note