PT-2023-24200 · Nextcloud+1 · Nextcloud Calendar+1

Themarkib · Published 2023-02-01 · Updated 2025-04-17 · CVE-2023-33183

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Calendar app versions prior to 3.5.5 Nextcloud Calendar app versions prior to 4.2.3

Description The issue concerns the disclosure of internal website paths when the SMTP server is unavailable. This affects the functionality of the Calendar app in syncing events across devices.

Recommendations For versions prior to 3.5.5, update to version 3.5.5. For versions prior to 4.2.3, update to version 4.2.3.

Exploit

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2025-05130

CVE-2023-33183

GHSA-2792-2734-HR7J

Affected Products

Nextcloud Calendar

Red Os

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/33xxx/CVE-2023-33183.json · Exploit
• https://github.com/nextcloud/calendar/pull/4938 · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2792-2734-hr7j · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-33183 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33183 · Security Note
• https://bdu.fstec.ru/vul/2025-05130 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://t.me/cvenotify/51347 · Telegram Post
• https://t.me/cvenotify/51780 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-nextcloud-app-calendar-cve-2023-33183 · Note