CVE-2023-35171 Nextcloud Server vulnerable to open redirect on "Unsupported browser" warning

Medium 4.1 Published 23 Jun 2023 Updated 7 Nov 2024

An attacker can redirect users from the legitimate Nextcloud domain to a malicious site via the unsupported browser warning, potentially facilitating phishing attacks.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2023-35171?

CVE-2023-35171 is a medium-severity vulnerability in Nextcloud Nextcloud Server, published on 23 Jun 2023. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supply a URL that redirects an unsuspecting victim from a legitimate domain to an attacker's site. Nextcloud Server and Nextcloud Enterprise Server 26.0.2 contain a patch for this issue. No known workarounds are available.

Weakness: CWE-601

Which versions are affected by CVE-2023-35171?

It affects 1 product.

Products include Nextcloud Nextcloud Server.

How do I fix CVE-2023-35171?

No fix has been published for CVE-2023-35171 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-35171 being exploited?

There is no known exploitation of CVE-2023-35171 in the wild and no public exploit code.

All Nextcloud Nextcloud Server vulnerabilities

Sources

Also known as GHSA-h353-vvwv-j2r4.