CVE-2023-39959 Existence of calendars and address books can be checked by unauthenticated users

🗓️ 10 Aug 2023 17:07:42Reported by GoogleType

osv

osv🔗 osv.dev👁 12 Views

Nextcloud Server data exposure vulnerability fix availabl

Reporter	Title	Published	Views	Family All 51
BDU FSTEC	The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to improper access control, which allows attackers to gain unauthorized access to protected information.	20 Sep 202300:00	–	bdu_fstec
CNNVD	Nextcloud Access Control Error Vulnerability	10 Aug 202300:00	–	cnnvd
CVE	CVE-2023-39959	10 Aug 202317:07	–	cve
Cvelist	CVE-2023-39959 Existence of calendars and address books can be checked by unauthenticated users	10 Aug 202317:07	–	cvelist
EUVD	EUVD-2023-43656	3 Oct 202520:07	–	euvd
Nextcloud	Existance of calendars and addressbooks can be checked by unauthenticated users	10 Aug 202307:19	–	nextcloud
Hacker One	Nextcloud: Existance of calendars and addressbooks can be checked by unauthenticated users	12 Jan 202301:46	–	hackerone
NVD	CVE-2023-39959	10 Aug 202318:15	–	nvd
OpenVAS	Nextcloud Server Multiple Vulnerabilities (GHSA-vv27-g2hq-v48h, GHSA-g97r-8ffm-hfpj, GHSA-qhgm-w4gx-gvgp, GHSA-xwxx-2752-w3xm, GHSA-j4qm-5q5x-54m5)	10 Aug 202300:00	–	openvas
Prion	Cross site request forgery (csrf)	10 Aug 202318:15	–	prion

Source	Link
hackerone	www.hackerone.com/reports/1832126
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39959.json
github	www.github.com/nextcloud/security-advisories/security/advisories/GHSA-g97r-8ffm-hfpj
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-39959
github	www.github.com/nextcloud/server/pull/38747

02 Apr 2026 09:18Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.13.5

EPSS0.00824

nextcloud server data exposure vulnerability fix