CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-48302

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, when a user is tricked into copy pasting HTML code without markup (Ctrl+Shift+V) the markup will actually render. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app text.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.8%

CVSS Severity

CVSS v3 Score 3.5

References

Products affected by CVE-2023-48302

Nextcloud » Nextcloud Server » Version: 25.0.0

cpe:2.3:a:nextcloud:nextcloud_server:25.0.0
Nextcloud » Nextcloud Server » Version: 25.0.11

cpe:2.3:a:nextcloud:nextcloud_server:25.0.11
Nextcloud » Nextcloud Server » Version: 25.0.2

cpe:2.3:a:nextcloud:nextcloud_server:25.0.2
Nextcloud » Nextcloud Server » Version: 25.0.3

cpe:2.3:a:nextcloud:nextcloud_server:25.0.3
Nextcloud » Nextcloud Server » Version: 25.0.4

cpe:2.3:a:nextcloud:nextcloud_server:25.0.4
Nextcloud » Nextcloud Server » Version: 25.0.5

cpe:2.3:a:nextcloud:nextcloud_server:25.0.5
Nextcloud » Nextcloud Server » Version: 25.0.6

cpe:2.3:a:nextcloud:nextcloud_server:25.0.6
Nextcloud » Nextcloud Server » Version: 25.0.7

cpe:2.3:a:nextcloud:nextcloud_server:25.0.7
Nextcloud » Nextcloud Server » Version: 25.0.8

cpe:2.3:a:nextcloud:nextcloud_server:25.0.8
Nextcloud » Nextcloud Server » Version: 25.0.9

cpe:2.3:a:nextcloud:nextcloud_server:25.0.9
Nextcloud » Nextcloud Server » Version: 26.0.0

cpe:2.3:a:nextcloud:nextcloud_server:26.0.0
Nextcloud » Nextcloud Server » Version: 26.0.1

cpe:2.3:a:nextcloud:nextcloud_server:26.0.1
Nextcloud » Nextcloud Server » Version: 26.0.2

cpe:2.3:a:nextcloud:nextcloud_server:26.0.2
Nextcloud » Nextcloud Server » Version: 26.0.3

cpe:2.3:a:nextcloud:nextcloud_server:26.0.3
Nextcloud » Nextcloud Server » Version: 26.0.4

cpe:2.3:a:nextcloud:nextcloud_server:26.0.4
Nextcloud » Nextcloud Server » Version: 26.0.5

cpe:2.3:a:nextcloud:nextcloud_server:26.0.5
Nextcloud » Nextcloud Server » Version: 26.0.6

cpe:2.3:a:nextcloud:nextcloud_server:26.0.6
Nextcloud » Nextcloud Server » Version: 26.0.7

cpe:2.3:a:nextcloud:nextcloud_server:26.0.7
Nextcloud » Nextcloud Server » Version: 27.0.0

cpe:2.3:a:nextcloud:nextcloud_server:27.0.0
Nextcloud » Nextcloud Server » Version: 27.0.1

cpe:2.3:a:nextcloud:nextcloud_server:27.0.1
Nextcloud » Nextcloud Server » Version: 27.0.2

cpe:2.3:a:nextcloud:nextcloud_server:27.0.2
Nextcloud » Nextcloud Server » Version: 27.1.0

cpe:2.3:a:nextcloud:nextcloud_server:27.1.0
Nextcloud » Nextcloud Server » Version: 27.1.1

cpe:2.3:a:nextcloud:nextcloud_server:27.1.1
Nextcloud » Nextcloud Server » Version: 27.1.2

cpe:2.3:a:nextcloud:nextcloud_server:27.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-48302

Products

Pricing

Contact Us