PT-2023-5257 · Nextcloud+2 · Nextcloud Server+2

Mikaelgundersen · Published 2023-08-10 · Updated 2025-01-24 · CVE-2023-39963

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions 20.0.0 through 20.0.14.14 Nextcloud Server versions 21.0.0 through 21.0.9.12 Nextcloud Server versions 22.0.0 through 22.2.10.13 Nextcloud Server versions 23.0.0 through 23.0.12.7 Nextcloud Server versions 24.0.0 through 24.0.12.4 Nextcloud Server version 25.0.8 and earlier Nextcloud Server version 26.0.3 and earlier Nextcloud Server version 27.0.0

Description The issue is related to a missing password confirmation in Nextcloud Server, which allows an attacker to create app passwords for a victim after stealing a session from a logged-in user. This can be exploited by a remote attacker to modify the user's password.

Recommendations For Nextcloud Server versions 20.0.0 through 20.0.14.14, update to version 20.0.14.15 or later. For Nextcloud Server versions 21.0.0 through 21.0.9.12, update to version 21.0.9.13 or later. For Nextcloud Server versions 22.0.0 through 22.2.10.13, update to version 22.2.10.14 or later. For Nextcloud Server versions 23.0.0 through 23.0.12.7, update to version 23.0.12.8 or later. For Nextcloud Server versions 24.0.0 through 24.0.12.4, update to version 24.0.12.5 or later. For Nextcloud Server version 25.0.8 and earlier, update to version 25.0.9 or later. For Nextcloud Server version 26.0.3 and earlier, update to version 26.0.4 or later. For Nextcloud Server version 27.0.0, update to version 27.0.1 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

ALT-PU-2023-7785

ALT-PU-2025-1855

BDU:2023-05874

CVE-2023-39963

GHSA-J4QM-5Q5X-54M5

Affected Products

Alt Linux

Nextcloud Server

Red Os

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39963.json · Exploit
• https://github.com/nextcloud/server/pull/39416 · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j4qm-5q5x-54m5 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05874 · Security Note
• https://osv.dev/vulnerability/CVE-2023-39963 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39963 · Security Note
• https://hackerone.com/reports/2067572 · Note
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-cve-2023-39958-cve-2023-39959-cve-2023-39962-cve-2023-39963-cve · Note
• https://twitter.com/cracbot/status/1689879451243577344 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1689740671203102720 · Twitter Post