What is CVE-2023-33183?

CVE-2023-33183 is a low-severity vulnerability in Nextcloud Calendar, classified under Improper Authorization. CVSS score: 2.6/10. Published 2023-05-30.

How severe is CVE-2023-33183?

Low severity. CVSS v3 base score is 2.6 out of 10.

Auth bypass in Nextcloud Calendar

CVE-2023-33183

Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4…

EPSS: 0.004 (35.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N.

Affected products

Nextcloud Calendar
Nextcloud Security-advisories — versions < 3.5.5, < 4.2.3

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
security-advisories@github.com (Patch, x_refsource_MISC)

Frequently asked questions

What is CVE-2023-33183?: CVE-2023-33183 is a low-severity vulnerability in Nextcloud Calendar, classified under Improper Authorization. CVSS score: 2.6/10. Published 2023-05-30.
How severe is CVE-2023-33183?: Low severity. CVSS v3 base score is 2.6 out of 10.