Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-45660

Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies allows for an attacker to abuse the proxy endpoint to denial of service a third server. It is recommended that the Nextcloud Mail is upgraded to 2.2.8 or 3.3.0. There are no known workarounds for this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.6%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2023-45660
  • Nextcloud » Mail » Version: 2.2.0
    cpe:2.3:a:nextcloud:mail:2.2.0
  • Nextcloud » Mail » Version: 2.2.1
    cpe:2.3:a:nextcloud:mail:2.2.1
  • Nextcloud » Mail » Version: 2.2.2
    cpe:2.3:a:nextcloud:mail:2.2.2
  • Nextcloud » Mail » Version: 2.2.3
    cpe:2.3:a:nextcloud:mail:2.2.3
  • Nextcloud » Mail » Version: 2.2.4
    cpe:2.3:a:nextcloud:mail:2.2.4
  • Nextcloud » Mail » Version: 2.2.5
    cpe:2.3:a:nextcloud:mail:2.2.5
  • Nextcloud » Mail » Version: 2.2.6
    cpe:2.3:a:nextcloud:mail:2.2.6
  • Nextcloud » Mail » Version: 2.2.7
    cpe:2.3:a:nextcloud:mail:2.2.7
  • Nextcloud » Mail » Version: 3.0.0
    cpe:2.3:a:nextcloud:mail:3.0.0
  • Nextcloud » Mail » Version: 3.0.1
    cpe:2.3:a:nextcloud:mail:3.0.1
  • Nextcloud » Mail » Version: 3.0.2
    cpe:2.3:a:nextcloud:mail:3.0.2
  • Nextcloud » Mail » Version: 3.0.3
    cpe:2.3:a:nextcloud:mail:3.0.3
  • Nextcloud » Mail » Version: 3.1.0
    cpe:2.3:a:nextcloud:mail:3.1.0
  • Nextcloud » Mail » Version: 3.1.1
    cpe:2.3:a:nextcloud:mail:3.1.1
  • Nextcloud » Mail » Version: 3.2.0
    cpe:2.3:a:nextcloud:mail:3.2.0
  • Nextcloud » Mail » Version: 3.2.1
    cpe:2.3:a:nextcloud:mail:3.2.1
  • Nextcloud » Mail » Version: 3.2.2
    cpe:2.3:a:nextcloud:mail:3.2.2
  • Nextcloud » Mail » Version: 3.2.3
    cpe:2.3:a:nextcloud:mail:3.2.3
  • Nextcloud » Mail » Version: 3.2.4
    cpe:2.3:a:nextcloud:mail:3.2.4
  • Nextcloud » Mail » Version: 3.2.5
    cpe:2.3:a:nextcloud:mail:3.2.5
  • Nextcloud » Mail » Version: 3.2.6
    cpe:2.3:a:nextcloud:mail:3.2.6
  • Nextcloud » Mail » Version: 3.2.7
    cpe:2.3:a:nextcloud:mail:3.2.7


Contact Us

Shodan ® - All rights reserved