CVE-2023-22470CWE-400

Nextcloud Deck vulnerable to uncontrolled resource consumption

Low · published January 14, 2023

CVSS v3.1
3.5
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error can be generated potentially causing a DoS when performed multiple times. There are currently no known workarounds. It is recommended that the Nextcloud Server is upgraded to 1.6.5 or 1.7.3 or 1.8.2.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00663 · 51.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-01-14T00:32Z
EPSS history
Timeline
  • 14 JAN 00:32Z
    Nextcloud Deck vulnerable to uncontrolled resource consumption
    cvelistv5