CVE-2023-32320

🗓️ 22 Jun 2023 21:15:09Reported by [email protected]Type

Nextcloud Server allows parallel execution of multiple faulty requests, bypassing request limit, versions 25.0.7, 26.0.2, Enterprise versions 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7 and 26.0.2 patche

Reporter	Title	Published	Views	Family All 52
BDU FSTEC	The vulnerability of cloud-based software for creating and using Nextcloud Server’s data storage solution lies in the lack of authentication attempt limits. This allows attackers to execute a brute-force attack.	25 Jan 202400:00	–	bdu_fstec
CNNVD	Nextcloud 安全漏洞	22 Jun 202300:00	–	cnnvd
CVE	CVE-2023-32320	22 Jun 202320:57	–	cve
Cvelist	CVE-2023-32320 Nextcloud Server's brute force protection allows someone to send more requests than intended	22 Jun 202320:57	–	cvelist
EUVD	EUVD-2023-36567	3 Oct 202520:07	–	euvd
Nextcloud	Brute force protection allows to send more requests than intended	22 Jun 202306:14	–	nextcloud
Hacker One	Nextcloud: Brute force protection allows to send more requests than intended	26 Mar 202319:35	–	hackerone
OpenVAS	Nextcloud Server 25.x < 25.0.7, 26.x < 26.0.2 Multiple Vulnerabilities (GHSA-qphh-6xh7-vffg, GHSA-mjf5-p765-qmr6, GHSA-h7f7-535f-7q87, GHSA-637g-xp2c-qh5h)	23 Jun 202300:00	–	openvas
OpenVAS	Nextcloud Server 25.x < 25.0.7, 26.x < 26.0.2 Brute Force Protection Vulnerability (GHSA-qphh-6xh7-vffg)	23 Jun 202300:00	–	openvas
OSV	CVE-2023-32320 Nextcloud Server's brute force protection allows someone to send more requests than intended	22 Jun 202320:57	–	osv

NVD

Node

nextcloud nextcloud_serverRange21.0.0–21.0.9.12enterprise

nextcloud nextcloud_serverRange22.0.0–22.2.10.12enterprise

nextcloud nextcloud_serverRange23.0.0–23.0.12.7enterprise

nextcloud nextcloud_serverRange24.0.0–24.0.12.2enterprise

nextcloud nextcloud_serverRange25.0.0–25.0.7-

nextcloud nextcloud_serverRange25.0.0–25.0.7enterprise

nextcloud nextcloud_serverRange26.0.0–26.0.2-

nextcloud nextcloud_serverRange26.0.0–26.0.2enterprise

Source	Link
github	www.github.com/nextcloud/server/pull/38274
github	www.github.com/nextcloud/security-advisories/security/advisories/GHSA-qphh-6xh7-vffg
hackerone	www.hackerone.com/reports/1918525

17 Jun 2026 05:58Current

8.6High risk

Vulners AI Score8.6

CVSS 3.17.5 - 8.7

EPSS0.00707

CWE-307