Nextcloud Server SSRF vulnerability in versions prior to 24.0.8 and 23.0.12 allows bypassing IP filters and gaining access to crucial metadata
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | SSRF via filter bypass due to lax checking on IPs | 13 Feb 202313:48 | – | nextcloud |
![]() | CVE-2023-25162 Nextcloud Server vulnerable to SSRF via filter bypass due to lax checking on IPs | 13 Feb 202320:34 | – | cvelist |
![]() | CVE-2023-25162 | 13 Feb 202321:15 | – | osv |
![]() | CVE-2023-25162 | 13 Feb 202321:15 | – | nvd |
![]() | Server side request forgery (ssrf) | 13 Feb 202321:15 | – | prion |
![]() | CVE-2023-25162 Nextcloud Server vulnerable to SSRF via filter bypass due to lax checking on IPs | 13 Feb 202320:34 | – | vulnrichment |
![]() | Nextcloud Server < 23.0.12, 24.x < 24.0.8 SSRF Vulnerability (GHSA-mqrx-grp7-244m) | 15 Feb 202300:00 | – | openvas |
[
{
"vendor": "nextcloud",
"product": "security-advisories",
"versions": [
{
"version": "< 23.0.12",
"status": "affected"
},
{
"version": ">= 24.0.0, < 24.0.8",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo