PT-2023-2470
CVE-2023-28644
·
Published
2023-01-23
·
Updated
2023-04-18
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Nextcloud server versions 25.0.0 through 25.0.2
Description
The issue is related to an inefficient fetch operation that may impact server performance and/or lead to a denial of service. This can be exploited by a remote attacker to initiate a denial of service attack. The vulnerability is associated with uncontrolled resource consumption.
Recommendations
For Nextcloud server versions 25.0.0 through 25.0.2, upgrade to version 25.0.3 to address the issue. There are no known workarounds for this vulnerability.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾