VDB
CVE-2020-8293
CVE-2020-8293
PUBLISHED
CVSS 6.5 MEDIUM
A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.
EPSS 1.58% · 75.2th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.58%
75.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | nextcloud_server | 19.0.0, 0, 20.0.0 |
| n/a | Nextcloud Server | 20.0.2 |
Timeline
- CVE Published
- Jan 21, 2021 PoC Published
- Apr 14, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 28, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Nov 12, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- May 20, 2023 EPSS Score