CVE-2023-28647 App pin of the iOS app can be bypassed in Nextcloud iOS
An attacker with physical access to an unlocked device can bypass the Nextcloud iOS app pin and access user files via the iOS Files app integration.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2023-28647?
CVE-2023-28647 is a medium-severity authentication bypass vulnerability in nextcloud security-advisories, published on 30 Mar 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7.0 when an attacker has physical access to an unlocked device, they may enable the integration into the iOS Files app and bypass the Nextcloud pin/password protection and gain access to a users files. It is recommended that the Nextcloud iOS app is upgraded to 4.7.0. There are no known workarounds for this vulnerability.
Which versions are affected by CVE-2023-28647?
1 open source package ship an affected version, including nextcloud. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
nextcloud Bitnami | All versions | 4.7.0 |
Products include Nextcloud Nextcloud.
How do I fix CVE-2023-28647?
Upgrade nextcloud to 4.7.0 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-28647 being exploited?
There is no known exploitation of CVE-2023-28647 in the wild and no public exploit code.
Other vulnerabilities in nextcloud security-advisories
- CVE-2019-5454 SQL injection in com.nextcloud.client
- CVE-2021-43863 SQL Injection in FileContentProvider (GHSL-2021-1007)
- CVE-2019-5450 Cross-site scripting in com.nextcloud.client
- CVE-2019-5455 Auth bypass in com.nextcloud.client
- CVE-2021-22905 Information disclosure in Nextcloud Android App (com.nextcloud.client)
Sources
Also known as BIT-nextcloud-2023-28647, GHSA-wjgg-2v4p-2gq6.