Skip to content
OpenAdvisories
Medium WID-SEC-2023-0314 1 CVE

Nextcloud Office App: Schwachstelle ermöglicht Offenlegung von Informationen

Published Feb 8, 2023 · Updated Feb 8, 2023 · de-DE

Vendor: Nextcloud Product: Nextcloud Product: Nextcloud Office App < 3.8.7 Product: Nextcloud Office App < 4.2.9 Product: Nextcloud Office App < 5.0.10 Product: Nextcloud Office App < 6.3.2 Product: Nextcloud Office App < 7.0.2 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in der Nextcloud Office App ausnutzen, um Informationen offenzulegen.

Product

Nextcloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.

Vulnerabilities 1

  • Medium 5.8
    CVE-2023-25150

    Document content of files can be obtained through Collabora for files of other users

    Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora…

    Nextcloud security-advisories

Revision history

  1. #1

    Initiale Fassung

References