CVE-2020-8295
Fixed in a distro release EPSS 2%
A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.
Products: nextcloud_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 12 | nextcloud | 20.0.11-bp153.2.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 20.0.11-bp153.2.3.1 |
| SUSE Package Hub 15 SP2 | nextcloud | 20.0.11-bp153.2.3.1 |
| SUSE Package Hub 15 SP2 | nextcloud | 20.0.7-bp152.2.6.1 |
| SUSE Package Hub 15 SP3 | nextcloud | 20.0.11-bp153.2.3.1 |
| openSUSE Leap 15.2 | nextcloud | 20.0.7-lp152.3.6.1 |
| openSUSE Leap 15.2 | nextcloud | 20.0.11-bp153.2.3.1 |
| openSUSE Leap 15.3 | nextcloud | 20.0.11-bp153.2.3.1 |