CVE-2024-52508
Vulnerability from cvelistv5
Published
2024-11-15 17:34
Modified
2024-11-15 18:17
Severity ?
8.2 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L
Summary
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like user@example.tld that does not support auto configuration, and an attacker managed to register autoconfig.tld, the used email details would be send to the server of the attacker. It is recommended that the Nextcloud Mail app is upgraded to 1.14.6, 1.15.4, 2.2.11, 3.6.3, 3.7.7 or 4.0.0.
References
security-advisories@github.comhttps://github.com/nextcloud/mail/commit/a84c70e15d814dab6f0e8eda71bbaaf48152079b
security-advisories@github.comhttps://github.com/nextcloud/mail/pull/9964
security-advisories@github.comhttps://github.com/nextcloud/security-advisories/security/advisories/GHSA-vmhx-hwph-q6mc
security-advisories@github.comhttps://hackerone.com/reports/2508422
Impacted products
Vendor Product Version
nextcloud security-advisories Version: >= 1.9.0, < 1.14.6
Version: >= 2.1.0, < 2.2.11
Version: >= 3.1.0, < 3.6.3
Version: >= 1.15.0, < 1.15.4
Version: >= 3.7.0, < 3.7.7
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:nextcloud:nextcloud_mail:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "nextcloud_mail",
                  vendor: "nextcloud",
                  versions: [
                     {
                        lessThan: "1.14.6",
                        status: "affected",
                        version: "1.9.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "2.2.11",
                        status: "affected",
                        version: "2.1.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "3.6.3",
                        status: "affected",
                        version: "3.1.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "15.4.0",
                        status: "affected",
                        version: "1.15.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "3.7.7",
                        status: "affected",
                        version: "3.7.0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-52508",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-11-15T18:12:55.485493Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-11-15T18:17:04.830Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "security-advisories",
               vendor: "nextcloud",
               versions: [
                  {
                     status: "affected",
                     version: ">= 1.9.0, < 1.14.6",
                  },
                  {
                     status: "affected",
                     version: ">= 2.1.0, < 2.2.11",
                  },
                  {
                     status: "affected",
                     version: ">= 3.1.0, < 3.6.3",
                  },
                  {
                     status: "affected",
                     version: ">= 1.15.0, < 1.15.4",
                  },
                  {
                     status: "affected",
                     version: ">= 3.7.0, < 3.7.7",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like user@example.tld that does not support auto configuration, and an attacker managed to register autoconfig.tld, the used email details would be send to the server of the attacker. It is recommended that the Nextcloud Mail app is upgraded to 1.14.6, 1.15.4, 2.2.11, 3.6.3, 3.7.7 or 4.0.0.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 8.2,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-200",
                     description: "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-11-15T17:34:21.900Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vmhx-hwph-q6mc",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vmhx-hwph-q6mc",
            },
            {
               name: "https://github.com/nextcloud/mail/pull/9964",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/nextcloud/mail/pull/9964",
            },
            {
               name: "https://github.com/nextcloud/mail/commit/a84c70e15d814dab6f0e8eda71bbaaf48152079b",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/nextcloud/mail/commit/a84c70e15d814dab6f0e8eda71bbaaf48152079b",
            },
            {
               name: "https://hackerone.com/reports/2508422",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://hackerone.com/reports/2508422",
            },
         ],
         source: {
            advisory: "GHSA-vmhx-hwph-q6mc",
            discovery: "UNKNOWN",
         },
         title: "Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-52508",
      datePublished: "2024-11-15T17:34:21.900Z",
      dateReserved: "2024-11-11T18:49:23.558Z",
      dateUpdated: "2024-11-15T18:17:04.830Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-52508\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2024-11-15T18:15:29.060\",\"lastModified\":\"2024-11-18T17:11:56.587\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like user@example.tld that does not support auto configuration, and an attacker managed to register autoconfig.tld, the used email details would be send to the server of the attacker. It is recommended that the Nextcloud Mail app is upgraded to 1.14.6, 1.15.4, 2.2.11, 3.6.3, 3.7.7 or 4.0.0.\"},{\"lang\":\"es\",\"value\":\"Nextcloud Mail es la aplicación de correo de Nextcloud, una plataforma de productividad alojada en servidores propios. Cuando un usuario intenta configurar una cuenta de correo con una dirección de correo electrónico como user@example.tld que no admite la configuración automática, y un atacante logra registrar autoconfig.tld, los detalles de correo electrónico utilizados se envían al servidor del atacante. Se recomienda que la aplicación Nextcloud Mail se actualice a 1.14.6, 1.15.4, 2.2.11, 3.6.3, 3.7.7 o 4.0.0.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.6,\"impactScore\":6.0}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"references\":[{\"url\":\"https://github.com/nextcloud/mail/commit/a84c70e15d814dab6f0e8eda71bbaaf48152079b\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/nextcloud/mail/pull/9964\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vmhx-hwph-q6mc\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://hackerone.com/reports/2508422\",\"source\":\"security-advisories@github.com\"}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-52508\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-11-15T18:12:55.485493Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:nextcloud:nextcloud_mail:*:*:*:*:*:*:*:*\"], \"vendor\": \"nextcloud\", \"product\": \"nextcloud_mail\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.9.0\", \"lessThan\": \"1.14.6\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"2.1.0\", \"lessThan\": \"2.2.11\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"3.1.0\", \"lessThan\": \"3.6.3\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"1.15.0\", \"lessThan\": \"15.4.0\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"3.7.0\", \"lessThan\": \"3.7.7\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-11-15T18:16:54.895Z\"}}], \"cna\": {\"title\": \"Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers\", \"source\": {\"advisory\": \"GHSA-vmhx-hwph-q6mc\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.2, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"nextcloud\", \"product\": \"security-advisories\", \"versions\": [{\"status\": \"affected\", \"version\": \">= 1.9.0, < 1.14.6\"}, {\"status\": \"affected\", \"version\": \">= 2.1.0, < 2.2.11\"}, {\"status\": \"affected\", \"version\": \">= 3.1.0, < 3.6.3\"}, {\"status\": \"affected\", \"version\": \">= 1.15.0, < 1.15.4\"}, {\"status\": \"affected\", \"version\": \">= 3.7.0, < 3.7.7\"}]}], \"references\": [{\"url\": \"https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vmhx-hwph-q6mc\", \"name\": \"https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vmhx-hwph-q6mc\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/nextcloud/mail/pull/9964\", \"name\": \"https://github.com/nextcloud/mail/pull/9964\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/nextcloud/mail/commit/a84c70e15d814dab6f0e8eda71bbaaf48152079b\", \"name\": \"https://github.com/nextcloud/mail/commit/a84c70e15d814dab6f0e8eda71bbaaf48152079b\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://hackerone.com/reports/2508422\", \"name\": \"https://hackerone.com/reports/2508422\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like user@example.tld that does not support auto configuration, and an attacker managed to register autoconfig.tld, the used email details would be send to the server of the attacker. It is recommended that the Nextcloud Mail app is upgraded to 1.14.6, 1.15.4, 2.2.11, 3.6.3, 3.7.7 or 4.0.0.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2024-11-15T17:34:21.900Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-52508\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-11-15T18:17:04.830Z\", \"dateReserved\": \"2024-11-11T18:49:23.558Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2024-11-15T17:34:21.900Z\", \"assignerShortName\": \"GitHub_M\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.