CVE-2023-33184 - Vulnerability Details - OpenCVE

Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Nextcloud	Mail

Configuration 1 [-]

OR	cpe:2.3:a:nextcloud:mail::::::::
	cpe:2.3:a:nextcloud:mail::::::::
	cpe:2.3:a:nextcloud:mail::::::::

No data.

References

Link	Providers
https://github.com/nextcloud/mail/pull/8275
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564
https://hackerone.com/reports/1913095

History

Tue, 14 Jan 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 20 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Nextcloud mail
CPEs	cpe:2.3:a:nextcloud:nextcloud_mail::::::::	cpe:2.3:a:nextcloud:mail::::::::
Vendors & Products	Nextcloud nextcloud Mail	Nextcloud mail

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-05-27T04:36:01.535Z

Updated: 2025-01-14T18:17:48.760Z

Reserved: 2023-05-17T22:25:50.697Z

Link: CVE-2023-33184

Vulnrichment

Updated: 2024-08-02T15:39:35.928Z

NVD

Status : Modified

Published: 2023-05-27T05:15:09.980

Modified: 2024-11-21T08:05:04.390

Link: CVE-2023-33184

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-33184", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-05-17T22:25:50.697Z", "datePublished": "2023-05-27T04:36:01.535Z", "dateUpdated": "2025-01-14T18:17:48.760Z"}, "containers": {"cna": {"title": "Blind SSRF in the Nextcloud Mail app on avatar endpoint", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564"}, {"name": "https://github.com/nextcloud/mail/pull/8275", "tags": ["x_refsource_MISC"], "url": "https://github.com/nextcloud/mail/pull/8275"}, {"name": "https://hackerone.com/reports/1913095", "tags": ["x_refsource_MISC"], "url": "https://hackerone.com/reports/1913095"}], "affected": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"version": "< 1.15.3", "status": "affected"}, {"version": "< 2.2.5", "status": "affected"}, {"version": "< 3.02", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-05-27T04:36:01.535Z"}, "descriptions": [{"lang": "en", "value": "Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.\n\n"}], "source": {"advisory": "GHSA-8gph-9895-w564", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:39:35.928Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564"}, {"name": "https://github.com/nextcloud/mail/pull/8275", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/nextcloud/mail/pull/8275"}, {"name": "https://hackerone.com/reports/1913095", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://hackerone.com/reports/1913095"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-14T18:17:35.371896Z", "id": "CVE-2023-33184", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-14T18:17:48.760Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564", "name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/nextcloud/mail/pull/8275", "name": "https://github.com/nextcloud/mail/pull/8275", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://hackerone.com/reports/1913095", "name": "https://hackerone.com/reports/1913095", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:39:35.928Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-33184", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-14T18:17:35.371896Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-14T18:17:44.274Z"}}], "cna": {"title": "Blind SSRF in the Nextcloud Mail app on avatar endpoint", "source": {"advisory": "GHSA-8gph-9895-w564", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"status": "affected", "version": "< 1.15.3"}, {"status": "affected", "version": "< 2.2.5"}, {"status": "affected", "version": "< 3.02"}]}], "references": [{"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564", "name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/nextcloud/mail/pull/8275", "name": "https://github.com/nextcloud/mail/pull/8275", "tags": ["x_refsource_MISC"]}, {"url": "https://hackerone.com/reports/1913095", "name": "https://hackerone.com/reports/1913095", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.\n\n"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918: Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-05-27T04:36:01.535Z"}}}, "cveMetadata": {"cveId": "CVE-2023-33184", "state": "PUBLISHED", "dateUpdated": "2025-01-14T18:17:48.760Z", "dateReserved": "2023-05-17T22:25:50.697Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2023-05-27T04:36:01.535Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*", "matchCriteriaId": "10ED288F-DD07-4B60-AE0F-786BF82F4ADB", "versionEndExcluding": "1.15.3", "versionStartIncluding": "1.13.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*", "matchCriteriaId": "A87F4309-C10F-41AC-B5BB-0DC0585AB5E1", "versionEndExcluding": "2.2.5", "versionStartIncluding": "2.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*", "matchCriteriaId": "C30FC59F-1EEF-452F-B2E0-3E2B22F2CB02", "versionEndExcluding": "3.0.2", "versionStartIncluding": "2.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.\n\n"}], "id": "CVE-2023-33184", "lastModified": "2024-11-21T08:05:04.390", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-05-27T05:15:09.980", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/nextcloud/mail/pull/8275"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking"], "url": "https://hackerone.com/reports/1913095"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/nextcloud/mail/pull/8275"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://hackerone.com/reports/1913095"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-918"}], "source": "nvd@nist.gov", "type": "Primary"}]}