CVE-2023-45660
Require strict cookies for image proxy requests in Nextcloud Mail
Résumé
Require strict cookies for image proxy requests in Nextcloud Mail
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies allows for an attacker to abuse the proxy endpoint to denial of service a third server. It is recommended that the Nextcloud Mail is upgraded to 2.2.8 or 3.3.0. There are no known workarounds for this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web hackerone.com