CVE-2023-48308
Calendar app returns full stacktrace when an error happens while editing appointment
Résumé
Calendar app returns full stacktrace when an error happens while editing appointment
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an exception while editing a calendar appointment. It is recommended that the Nextcloud Calendar app is upgraded to 4.5.3
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com