CVE-2023-33184
Blind SSRF in the Nextcloud Mail app on avatar endpoint
概要
Blind SSRF in the Nextcloud Mail app on avatar endpoint
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web hackerone.com