CVEvulnerability

CVE-2020-8293

6.5 MEDIUM Published 2021-01-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-400

Description

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

Affected configurations

• nextcloud nextcloud server (< 18.0.11) • nextcloud nextcloud server (>= 19.0.0 < 19.0.5) • nextcloud nextcloud server (>= 20.0.0 < 20.0.2)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References