CVE-2023-32318

EUVD-2023-36565
Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session on logout if cookies were not cleared manually. After successfully authenticating with any other account the previous session would be continued and the attacker would be authenticated as the previously logged in user. It is recommended that the Nextcloud Server is upgraded to 25.0.6 or 26.0.1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
GitHub_MCNA
7.2 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
Affected Products (NVD)
VendorProductVersion
nextcloudnextcloud_server
25.0.2 ≤
𝑥
< 25.0.6
nextcloudnextcloud_server
25.0.2 ≤
𝑥
< 25.0.6
nextcloudnextcloud_server
26.0.0
nextcloudnextcloud_server
26.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-q8c4-chpj-6v38
https://github.com/nextcloud/text/pull/3946
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-q8c4-chpj-6v38
https://github.com/nextcloud/text/pull/3946