CVE-2017-0886

Summary

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.

Affected Software

VendorProductVersion RangeStatus
NextcloudNextcloud ServerAll versions before 9.0.55 and 10.0.2affected

Weaknesses

  • CWE-674: Uncontrolled Recursion (CWE-674)

ADP Enrichment

CVE Program Container

Additional References

References