CVE-2023-49791

Summary

CVE-2023-49791 is a vulnerability affecting Nextcloud Server, an open-source cloud platform. The vulnerability exists in versions prior to 26.0.9 and 27.1.4 of Nextcloud Server, as well as versions prior to 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 of Nextcloud Enterprise Server. If an attacker gains access to an active session of another user through unauthorized means, they can bypass the password confirmation and delete or modify workflows by sending direct calls to the API, without being detected through the user interface (UI). The issue has been patched in Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25. Organizations using affected versions of Nextcloud should update to the patched versions mentioned above to remediate the vulnerability and protect against potential exploitation by attackers with unauthorized access to user sessions. This vulnerability poses a medium risk with a base severity rating of 5. 4 out of a possible score of 10 according to the Common Vulnerability Scoring System (CVSS) version 3. 1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.