CVE-2023-49792

MEDIUM

Nextcloud Server 23.0.0-23.0.12.13, 26.0.0-26.0.9 - Authentication Bypass via Trusted Proxy Spoofing

Title source: llm

Description

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a (reverse) proxy is configured as trusted proxy the server could be tricked into reading a wrong remote address for an attacker, allowing them executing authentication attempts than intended. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5j2p-q736-hw98

Patch x_refsource_misc

https://github.com/nextcloud/server/pull/41526

Permissions Required x_refsource_misc

https://hackerone.com/reports/2230915

Scores

CVSS v3 5.3

EPSS 0.0041

EPSS Percentile 61.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-307

Status published

Products (2)

nextcloud/nextcloud_server 23.0.0 - 23.0.12.13

nextcloud/nextcloud_server 26.0.0 - 26.0.9

Published Dec 22, 2023

Tracked Since Feb 18, 2026