Skip to content
OpenAdvisories
Low · 3.5 CVE-2023-48308 EUVD-2023-52368

Calendar app returns full stacktrace when an error happens while editing appointment

Published Dec 21, 2023 · Updated Nov 27, 2024 · Assigned by GitHub_M

Description

Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an exception while editing a calendar appointment. It is recommended that the Nextcloud Calendar app is upgraded to 4.5.3

Affected products

VendorProductAffectedFixed
nextcloud security-advisories >= 3.0.0, < 4.5.3 —

Advisories 1

References