Lucene search
K

Nextcloud: Ratelimiting can be bypassed using IPv6 subnets

🗓️ 07 Apr 2021 01:26:34Reported by sjwType 
hackerone
 hackerone
🔗 hackerone.com👁 22 Views

Nextcloud: Ratelimiting bypass via IPv6 subnets, hardcodes /128 for subnets, attackers can bypass protections by generating from assigned /48 subnet

Related
ReporterTitlePublishedViews
Family
Circl
CVE-2021-22915
11 Jun 202120:52
circl
CNNVD
Nextcloud server 处理逻辑错误漏洞
11 Jun 202100:00
cnnvd
CNVD
Nextcloud server processing logic error vulnerability
17 Jun 202100:00
cnvd
CVE
CVE-2021-22915
11 Jun 202115:49
cve
Cvelist
CVE-2021-22915
11 Jun 202115:49
cvelist
EUVD
EUVD-2021-10044
7 Oct 202500:30
euvd
Fedora
[SECURITY] Fedora 34 Update: nextcloud-20.0.10-1.fc34
9 Jul 202101:03
fedora
Fedora
[SECURITY] Fedora 33 Update: nextcloud-19.0.12-1.fc33
9 Jul 202100:46
fedora
Nextcloud
Ratelimiting can be bypassed using IPv6 subnets
1 Jun 202118:02
nextcloud
NVD
CVE-2021-22915
11 Jun 202116:15
nvd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Jul 2021 18:02Current
0.7Low risk
Vulners AI Score0.7
EPSS0.00491
22