Lucene search
K

CVE-2021-22915

🗓️ 11 Jun 2021 15:49:38Reported by hackeroneType 
cvelist
 cvelist
🔗 www.cve.org👁 13 Views

Nextcloud server vulnerable to brute force attacks due to lack of IPv6 subnet inclusion in rate-limiting control

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-22915
11 Jun 202120:52
circl
CNNVD
Nextcloud server 处理逻辑错误漏洞
11 Jun 202100:00
cnnvd
CNVD
Nextcloud server processing logic error vulnerability
17 Jun 202100:00
cnvd
CVE
CVE-2021-22915
11 Jun 202115:49
cve
EUVD
EUVD-2021-10044
7 Oct 202500:30
euvd
Fedora
[SECURITY] Fedora 34 Update: nextcloud-20.0.10-1.fc34
9 Jul 202101:03
fedora
Fedora
[SECURITY] Fedora 33 Update: nextcloud-19.0.12-1.fc33
9 Jul 202100:46
fedora
Nextcloud
Ratelimiting can be bypassed using IPv6 subnets
1 Jun 202118:02
nextcloud
Hacker One
Nextcloud: Ratelimiting can be bypassed using IPv6 subnets
7 Apr 202101:26
hackerone
NVD
CVE-2021-22915
11 Jun 202116:15
nvd
Rows per page
[
  {
    "product": "Nextcloud Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 19.0.11, 20.0.10, 21.0.2"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Jul 2021 08:08Current
9.5High risk
Vulners AI Score9.5
EPSS0.01739
13