Low severity3.5NVD Advisory· Published May 27, 2023· Updated Jun 17, 2026

CVE-2023-33184

Description

Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Mailllm-fuzzy
Range: 3.02, 2.2.5, 1.15.3
nextcloud/security-advisoriesv5
Range: < 1.15.3

Patches

Vulnerability mechanics

References

github.com/nextcloud/mail/pull/8275nvdPatch
github.com/nextcloud/security-advisories/security/advisories/GHSA-8gph-9895-w564nvdVendor Advisory
hackerone.com/reports/1913095nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000