Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2023-48308

Calendar app returns full stacktrace when an error happens while editing appointment

Description

Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an exception while editing a calendar appointment. It is recommended that the Nextcloud Calendar app is upgraded to 4.5.3

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nextcloud security-advisories

  • >= 3.0.0, < 4.5.3affected

References