CVE-2020-8293

Summary

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

Affected Software

VendorProductVersion RangeStatus
n/aNextcloud ServerFixed in 20.0.2, 19.0.5, 18.0.11affected

Weaknesses

  • CWE-400: Denial of Service (CWE-400)

ADP Enrichment

CVE Program Container

Additional References

References