Total vulnerabilities in the database
Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing database and cause a denial of service. It is recommended that the Nextcloud Server is upgraded to 22.2.10, 23.0.7 or 24.0.3. There are no known workarounds for this issue.
| Software | From | Fixed in |
|---|---|---|
| nextcloud / nextcloud_enterprise_server | 23.0.0 | 23.0.7 |
| nextcloud / nextcloud_enterprise_server | 24.0.0 | 24.0.3 |
| nextcloud / nextcloud_server | 24.0.0 | 24.0.3 |
| nextcloud / nextcloud_enterprise_server | - | 22.2.10 |
| nextcloud / nextcloud_server | - | 22.2.10 |
| nextcloud / nextcloud_server | 23.0.0 | 23.0.7 |
| fedoraproject / fedora | 35 | 35.x |
| fedoraproject / fedora | 36 | 36.x |
| fedoraproject / fedora | 37 | 37.x |