CVE-2023-28643 Potential share collision for recipients when caching is enabled in nextcloud server

🗓️ 30 Mar 2023 18:31:31Reported by GoogleType

osv

osv🔗 osv.dev👁 21 Views

Nextcloud server vulnerability: share replacement issue

Reporter	Title	Published	Views	Family All 28
BDU FSTEC	The vulnerability of cloud-based software for creating and using Nextcloud storage solutions allows a hacker to gain unauthorized access to protected information.	27 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of cloud-based software for creating and using Nextcloud data storage allows a attacker to cause a service failure.	27 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of cloud-based software for creating and using Nextcloud data storage allows a hacker to induce a service failure.	27 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of cloud-based software for creating and using Nextcloud data storage allows a hacker to induce a service failure.	27 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of cloud-based software for creating and using Nextcloud data storage allows a hacker to execute arbitrary code.	27 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-28643	30 Mar 202322:35	–	circl
CNNVD	Nextcloud 安全漏洞	30 Mar 202300:00	–	cnnvd
CVE	CVE-2023-28643	30 Mar 202318:31	–	cve
Cvelist	CVE-2023-28643 Potential share collision for recipients when caching is enabled in nextcloud server	30 Mar 202318:31	–	cvelist
EUVD	EUVD-2023-32304	3 Oct 202520:07	–	euvd

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28643.json
github	www.github.com/nextcloud/security-advisories/security/advisories/GHSA-hhq4-4pr8-wm27
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-28643
github	www.github.com/nextcloud/server/issues/34015
github	www.github.com/nextcloud/server/pull/36047

10 Apr 2026 04:56Current

8.4High risk

Vulners AI Score8.4

CVSS 3.15.5

EPSS0.00662

nextcloud vulnerability share replacement upgrade software