CVE-2023-45660

Summary

CVE-2023-45660 is a vulnerability affecting Nextcloud Mail, an email application on the Nextcloud home server platform. This issue arises from a missing origin, target, and cookie check, enabling attackers to misuse the proxy endpoint and cause denial-of-service attacks against third-party servers. Users are strongly advised to upgrade their Nextcloud Mail version to either 2.2.8 or 3.3.0 to mitigate this risk. No workarounds have been discovered for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.