CVE-2020-8293CWE-400

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential…

published January 26, 2021

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01576 · 75.3th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-01-26T16:33Z
EPSS history
Timeline
  • 26 JAN 16:33Z
    A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential…
    cvelistv5