by Kastro
Paper/Archive/CVE-2022-31132

CVE-2022-31132

nextcloud security-advisories — Unauthenticated SSRF in 3rd party module "cerdic/csstidy"

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.1.541 × 2010.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS minifier on the path `./vendor/cerdic/css-tidy/css_optimiser.php`. Access to the minifier is unrestricted and access may lead to Server-Side Request Forgery (SSRF). It is recommendet to upgrade to Mail 1.12.7 or Mail 1.13.6. Users unable to upgrade may manually delete the file located at `./vendor/cerdic/css-tidy/css_optimiser.php`

Affected

ProductAffectedFixed inSource
security-advisories< 1.12.8–CNA
security-advisories>= 1.13.0, < 1.13.6–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub_M (CNA)8.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgithub.com/nextcloud/security-advisories/security/advisories/GHSA-24pm-rjfv-23mh