Lucene search
PRIOn knowledge basePRION:CVE-2023-25821HistoryFeb 25, 2023 - 12:15 a.m.
Improper access control
2023-02-2500:15:00
PRIOn knowledge base
www.prio-n.com
3
nextcloud
open source
private cloud software
versions 24.0.4
24.0.7
25.0.0
25.0.1
improper access control
secure view
internal shares
circumvented
reshare permissions
patched
nvd
0.001 Low
EPSS
Percentile
49.7%
Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improper Access Control. Secure view for internal shares can be circumvented if reshare permissions are also given. This issue is patched in versions 24.0.7 and 25.0.1. No workaround is available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud_server | eq | 25.0.0 | |
| nextcloud_server | eq | 25.0.0 | |
| nextcloud_server | ge | 24.0.4 | |
| nextcloud_server | lt | 24.0.7 | |
| nextcloud_server | ge | 24.0.4 | |
| nextcloud_server | lt | 24.0.7 |
Related
nextcloud
nextcloud
Download permissions can be changed by resharer
2023-02-24 07:17:34
cvelist
cvelist
CVE-2023-25821 Nextcloud download permissions can be changed by resharer
2023-02-24 23:39:51
osv
osv
CVE-2023-25821
2023-02-25 00:15:11
nvd
nvd
CVE-2023-25821
2023-02-25 00:15:11
hackerone
hackerone
Nextcloud: Download permissions can be changed by resharer
2022-10-06 06:49:36
cve
cve
CVE-2023-25821
2023-02-25 00:15:11
openvas
openvas
redos
redos
ROS-20230413-01
2023-04-13 00:00:00