CVE-2023-33184
Blind SSRF in the Nextcloud Mail app on avatar endpoint
Résumé
Blind SSRF in the Nextcloud Mail app on avatar endpoint
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web hackerone.com