CVE-2020-8293

🗓️ 26 Jan 2021 16:33:25Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 150 Views

A missing input validation in Nextcloud Server allows unlimited data storage in workflow rules, leading to potential DDoS

Reporter	Title	Published	Views	Family All 42
Circl	CVE-2020-8293	26 Jan 202120:42	–	circl
CNNVD	Nextcloud 资源管理错误漏洞	26 Jan 202100:00	–	cnnvd
CNVD	Nextcloud Server Resource Management Error Vulnerability	3 Feb 202100:00	–	cnvd
Cvelist	CVE-2020-8293	26 Jan 202116:33	–	cvelist
EUVD	EUVD-2020-29161	7 Oct 202500:30	–	euvd
Hacker One	Nextcloud: Potential DDoS when posting long data into workflow validation rules	25 Oct 202004:00	–	hackerone
Nextcloud	Potential DDoS when posting long data into workflow validation rules (NC-SA-2021-001)	18 Nov 202000:00	–	nextcloud
NVD	CVE-2020-8293	26 Jan 202118:16	–	nvd
Tenable Nessus	openSUSE 15 Security Update : nextcloud (openSUSE-SU-2021:1068-1)	21 Jul 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : nextcloud (openSUSE-2021-262)	9 Feb 202100:00	–	nessus

NVD

Vulners

Node

nextcloud nextcloud_serverRange<18.0.11

nextcloud nextcloud_serverRange19.0.0–19.0.5

nextcloud nextcloud_serverRange20.0.0–20.0.2

[
  {
    "product": "Nextcloud Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 20.0.2, 19.0.5, 18.0.11"
      }
    ]
  }
]