CVE-2023-49792
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Summary
CVE-2023-49792 is a vulnerability that affects Nextcloud Server and Nextcloud Enterprise Server versions prior to 26.0.9, 27.1.4, 23.0.12.13, 24.0.12.9, 25.0.13.4, and 27.1.4. When a trusted proxy is configured, the servers can be tricked into reading an incorrect remote address for an attacker, allowing them to execute authentication attempts that were not intended to be permitted. The issue has been patched in the mentioned versions of Nextcloud Server and Nextcloud Enterprise Server, but no known workarounds are available at this time. The vulnerability poses a medium risk with a base severity score of 5.3 according to the CVSS vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. Note: The information provided is based on the given text and does not imply any personal opinion or endorsement of the described vulnerability or affected products/services.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions