CVE-2023-33183
Error in calendar when booking an appointment reveals the full path of the website
Summary
Error in calendar when booking an appointment reveals the full path of the website
Original description
The description as published by the source.
Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4.2.3
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com