CVE-2017-0887CWE-807

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation

published April 5, 2017

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00888 · 58.7th percentile
Weakness
CWE-807 · Reliance on Untrusted Inputs in a Security Decision
Published
2017-04-05T20:00Z
EPSS history
Timeline
  • 05 APR 20:00Z
    Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation
    cvelistv5