System addressbooks can be modified by malicious trusted server

🗓️ 22 Jun 2023 13:22:53Reported by NextcloudType

System addressbooks modification by malicious trusted serve

Reporter	Title	Published	Views	Family All 50
BDU FSTEC	The vulnerability of cloud-based software for creating and using NextCloud Server’s data storage system is related to lack of access control. This allows a malicious individual to modify or delete VCards from the system address book on the NextCloud server.	25 Jan 202400:00	–	bdu_fstec
CNNVD	Nextcloud 访问控制错误漏洞	23 Jun 202300:00	–	cnnvd
CVE	CVE-2023-35927	23 Jun 202320:53	–	cve
Cvelist	CVE-2023-35927 Nextcloud system addressbooks can be modified by malicious trusted server	23 Jun 202320:53	–	cvelist
EUVD	EUVD-2023-39916	3 Oct 202520:07	–	euvd
NVD	CVE-2023-35927	23 Jun 202321:15	–	nvd
OpenVAS	Nextcloud Server 25.x < 25.0.7, 26.x < 26.0.2 Multiple Vulnerabilities (GHSA-qphh-6xh7-vffg, GHSA-mjf5-p765-qmr6, GHSA-h7f7-535f-7q87, GHSA-637g-xp2c-qh5h)	23 Jun 202300:00	–	openvas
OSV	CVE-2023-35927 Nextcloud system addressbooks can be modified by malicious trusted server	23 Jun 202320:53	–	osv
Prion	Code injection	23 Jun 202321:15	–	prion
Positive Technologies	PT-2023-23726 · Nextcloud +1 · Nextcloud Server +1	31 Mar 202300:00	–	ptsecurity