CVE-2022-41968

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 23.0.10 and 24.0.5 contain patches for the issue. No known workarounds are available.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*

History

06 Jul 2023, 13:42

Type Values Removed Values Added
CWE CWE-400 CWE-1284

Information

Published : 2022-12-01 21:15

Updated : 2024-02-28 19:51


NVD link : CVE-2022-41968

Mitre link : CVE-2022-41968

CVE.ORG link : CVE-2022-41968


JSON object : View

Products Affected

nextcloud

  • nextcloud_server
CWE
CWE-1284

Improper Validation of Specified Quantity in Input

CWE-400

Uncontrolled Resource Consumption