CVE-2020-8293
Fixed in a distro release EPSS 2%
A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.
Products: nextcloud_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 12 | nextcloud | 20.0.11-bp153.2.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 20.0.11-bp153.2.3.1 |
| SUSE Package Hub 15 SP2 | nextcloud | 20.0.11-bp153.2.3.1 |
| SUSE Package Hub 15 SP2 | nextcloud | 20.0.7-bp152.2.6.1 |
| SUSE Package Hub 15 SP3 | nextcloud | 20.0.11-bp153.2.3.1 |
| openSUSE Leap 15.2 | nextcloud | 20.0.7-lp152.3.6.1 |
| openSUSE Leap 15.2 | nextcloud | 20.0.11-bp153.2.3.1 |
| openSUSE Leap 15.3 | nextcloud | 20.0.11-bp153.2.3.1 |