CVE-2021-22906

2021-06-1115:49:39

CWE-400

hackerone

www.cve.org

nextcloud

encryption

dos

EPSS

0.001

Percentile

37.6%

JSON

Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users.

CNA Affected

[
  {
    "product": "Nextcloud End-to-End Encryption",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 1.5.3, 1.6.3, 1.7.1"
      }
    ]
  }
]