CVE-2023-25816
nextcloud vulnerable to Uncontrolled Resource Consumption
Résumé
nextcloud vulnerable to Uncontrolled Resource Consumption
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A user can configure a very long password, consuming more resources on password validation than desired. This issue is patched in 25.0.3 No workaround is available.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web hackerone.com