Medium severity5.0NVD Advisory· Published Feb 6, 2023· Updated Jun 17, 2026
CVE-2023-23943
CVE-2023-23943
Description
Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve host fields allowed to scan for internal services and servers reachable from within the local network of the Nextcloud Server. It is recommended that the Nextcloud Maill app is upgraded to 1.15.0 or 2.2.2. The only known workaround for this issue is to completely disable the nextcloud mail app.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- nextcloud/security-advisoriesv5Range: >= 2.0.0, < 2.2.2
Patches
Vulnerability mechanics
References
5- github.com/nextcloud/mail/pull/7796nvdPatch
- hackerone.com/reports/1736390nvdExploitThird Party Advisory
- hackerone.com/reports/1741525nvdExploitThird Party Advisory
- hackerone.com/reports/1746582nvdExploitThird Party Advisory
- github.com/nextcloud/security-advisories/security/advisories/GHSA-8gcx-r739-9pf6nvdVendor Advisory
News mentions
0No linked articles in our index yet.