Description (CNA)
Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an exception while editing a calendar appointment. It is recommended that the Nextcloud Calendar app is upgraded to 4.5.3
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| nextcloud / security-advisories | affected >= 3.0.0, < 4.5.3 |
CWE
CWE-1258
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-fv3c-qvjr-5rv8
- https://github.com/nextcloud/calendar/pull/5553
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.