CVE-2023-48308

VendornextcloudProductcalendarDiscoveredDec 22, 2023UpdatedNov 21, 2024

Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an exception while editing a calendar appointment. It is recommended that the Nextcloud Calendar app is upgraded to 4.5.3

View graph Watch Export

CVSS v3.1

3.5 LOW

EPSS

0.55%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredLOW

User InteractionREQUIRED

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityLOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Connections

2 relationships

CWE-1258

source

Timeline

disclosure → media coverage

Dec 22, 2023

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024