exploitDog

GHSA-27v9-58mg-8v43

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability when subscribing to a malicious calendar URL.

A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability when subscribing to a malicious calendar URL.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2020-8138
https://hackerone.com/reports/736867
https://nextcloud.com/security/advisory/?id=NC-SA-2020-014

EPSS

Процентиль: 73%

0.01395

Низкий

CVE ID

Связанные уязвимости

CVE-2020-8138

CVSS3: 6.5

nvd

больше 6 лет назад

A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability when subscribing to a malicious calendar URL.

CVE-2020-8138

CVSS3: 6.5

debian

больше 6 лет назад

A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0 ...

ALT-PU-2020-3060

CVSS3: 8.1

altlinux

около 6 лет назад

ALT-PU-2020-3060: package `nextcloud` update to version 20.0.0-alt1

EPSS

Процентиль: 73%

0.01395

Низкий

CVE ID