CVE-2023-25579

🗓️ 22 Feb 2023 19:11:15Reported by [email protected]Type

Nextcloud server vulnerability due to incorrect validation of file paths leading to potential data overwrite

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Vulnrichment	CVE-2023-25579 Directory traversal in Nextcloud server	22 Feb 202318:21	–	vulnrichment
Prion	Design/Logic Flaw	22 Feb 202319:15	–	prion
OSV	CVE-2023-25579	22 Feb 202319:15	–	osv
Cvelist	CVE-2023-25579 Directory traversal in Nextcloud server	22 Feb 202318:21	–	cvelist
CVE	CVE-2023-25579	22 Feb 202319:15	–	cve
OpenVAS	Nextcloud Server < 23.0.12, 24.x < 24.0.8, 25.x < 25.0.2 Path Traversal Vulnerability (GHSA-273v-9h7x-p68v)	23 Feb 202300:00	–	openvas
OpenVAS	openSUSE: Security Advisory for nextcloud (openSUSE-SU-2023:0083-1)	4 Mar 202400:00	–	openvas
Nextcloud	Potential directory traversal in OC\Files\Node\Folder::getFullPath	22 Feb 202308:33	–	nextcloud
Tenable Nessus	openSUSE 15 Security Update : nextcloud (openSUSE-SU-2023:0083-1)	4 Apr 202300:00	–	nessus

Nvd

Node

nextcloud nextcloud_serverRange<23.0.12

nextcloud nextcloud_serverRange20.0.0–20.0.14enterprise

nextcloud nextcloud_serverRange21.0.0–21.0.9enterprise

nextcloud nextcloud_serverRange22.2.0–22.2.10enterprise

nextcloud nextcloud_serverRange23.0.0–23.0.12enterprise

nextcloud nextcloud_serverRange24.0.0–24.0.8

nextcloud nextcloud_serverRange24.0.0–24.0.8enterprise

nextcloud nextcloud_serverRange25.0.0–25.0.2

nextcloud nextcloud_serverRange25.0.0–25.0.2enterprise

Source	Link
github	www.github.com/nextcloud/server/pull/35074
github	www.github.com/nextcloud/security-advisories/security/advisories/GHSA-273v-9h7x-p68v

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Feb 2023 19:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS37.5

EPSS0.00065

CWE-22