CVE-2021-32703 — Vulnetix

CVE-2021-32703 PUBLISHED CVSS 5.300000190734863 MEDIUM

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, there was a lack of ratelimiting on the shareinfo endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. There are no known workarounds.

EPSS 0.55% · 68.5th percentile

Risk Scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

0.55%

68.5th percentile

Affected Products

Vendor	Product	Versions
nextcloud	security-advisories	>= 20.0.0, < 20.0.11, *, >= 21.0.0, < 21.0.3
fedoraproject	fedora	34, 33
nextcloud	nextcloud_server	21.0.0, 20.0.0, 0

Exploit Intelligence

CIRCL seen: CVE-2021-32703 (circl-sighting)
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-375p-cxxq-gc9p (circl)
https://github.com/nextcloud/server/pull/26945 (circl)
https://hackerone.com/reports/1173684 (circl)
FEDORA-2021-9b421b78af (circl)
FEDORA-2021-6f327296fe (circl)
GLSA-202208-17 (circl)
index.php/apps/files_sharing/shareinfo endpoint is not properly protected (hackerone)
index.php/apps/files_sharing/shareinfo endpoint is not properly protected (hackerone)
index.php/apps/files_sharing/shareinfo endpoint is not properly protected (hackerone)

Timeline

CVE Published
Jul 12, 2021 PoC Published
Jul 13, 2021 EPSS Score
Aug 11, 2021 PoC Published
Sep 11, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Jan 8, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 7, 2022 EPSS Score
Jul 6, 2022 EPSS Score
Nov 4, 2022 EPSS Score

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-375p-cxxq-gc9p url
https://github.com/nextcloud/server/pull/26945 url
https://hackerone.com/reports/1173684 url
FEDORA-2021-9b421b78af vendor-advisory
FEDORA-2021-6f327296fe vendor-advisory
GLSA-202208-17 vendor-advisory

Open in Interactive Console →