Описание
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- Permissions RequiredThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- Permissions RequiredThird Party Advisory
Уязвимые конфигурации
Одно из
EPSS
4.8 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
Связанные уязвимости
Nextcloud Server is the file server software for Nextcloud, a self-hos ...
ALT-PU-2023-1056: package `nextcloud` update to version 25.0.0-alt1
ALT-PU-2022-2949: package `nextcloud` update to version 25.0.0-alt1
EPSS
4.8 Medium
CVSS3
4.3 Medium
CVSS3