Lucene search

K
nextcloudNordinNC-SA-2017-005
HistoryFeb 05, 2017 - 12:00 a.m.

Bypassing quota limitation (NC-SA-2017-005)

2017-02-0500:00:00
Nordin
nextcloud.com
11

EPSS

0.001

Percentile

21.7%

Due to not properly sanitzing values provided by the OC-Total-Length HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.

EPSS

0.001

Percentile

21.7%