CVE-2023-33183CWE-285

Error in calendar when booking an appointment reveals the full path of the website

Low · published May 30, 2023

CVSS v3.1
2.6
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4.2.3

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00438 · 37.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-05-30T05:01Z
EPSS history
Timeline
  • 30 MAY 05:01Z
    Error in calendar when booking an appointment reveals the full path of the website
    cvelistv5