Skip to content
OpenAdvisories
Unscored CVE-2017-0886 EUVD-2017-1240GHSA-cpjv-m49g-h8m9

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticate…

Published Apr 5, 2017 · Updated Aug 5, 2024 · Assigned by hackerone

Description

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.

Affected products

VendorProductAffectedFixed
Nextcloud Nextcloud Server All versions before 9.0.55 and 10.0.2 —

References