Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-39330

Опубликовано: 27 окт. 2022
Источник: debian
EPSS Низкий

Описание

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
nextcloud-serveritppackage

EPSS

Процентиль: 66%
0.0109
Низкий

Связанные уязвимости

CVSS3: 4.3
nvd
около 4 лет назад

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.

CVSS3: 8.1
altlinux
почти 4 года назад

ALT-PU-2023-1056: package `nextcloud` update to version 25.0.0-alt1

CVSS3: 8.1
altlinux
около 4 лет назад

ALT-PU-2022-2949: package `nextcloud` update to version 25.0.0-alt1

EPSS

Процентиль: 66%
0.0109
Низкий