VULNERABILITY INTELLIGENCE

CVE-2023-33184

CVSS score3.5 LOW
EPSS probability0.53%
CISA KEVNot currently listed
Published2023-05-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.

Weakness classification

  • security-advisories@github.com: CWE-918
  • nvd@nist.gov: CWE-918

Primary references