CVE-2020-8293 | BDVDB-2026-148148 Detail

Nextcloud Server

Description#

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-400 Uncontrolled Resource Consumption

References#

https://hackerone.com/reports/1018146
https://nextcloud.com/security/advisory/?id=NC-SA-2021-001

Exploit#

No public exploit known

History#

Version 12021-01-26Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.