Lucene search
GoogleOSV:CVE-2021-37629HistorySep 07, 2021 - 9:15 p.m.
CVE-2021-37629
2021-09-0721:15:08
Google
osv.dev
6
nextcloud richdocuments
rate limiting
ocs endpoint
share tokens
upgrade
disable
Nextcloud Richdocuments is an open source collaborative office suite. In affected versions there is a lack of rate limiting on the Richdocuments OCS endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. It is recommended that the Nextcloud Richdocuments app is upgraded to either 3.8.4 or 4.2.1 to resolve. For users unable to upgrade it is recommended that the Richdocuments application be disabled.
Related
nvd
nvd
CVE-2021-37629
2021-09-07 21:15:08
prion
prion
Design/Logic Flaw
2021-09-07 21:15:00
nextcloud
nextcloud
Lack of ratelimit on Richdocuments OCS endpoint
2021-09-06 08:37:29
cnvd
cnvd
Nextcloud Information Disclosure Vulnerability (CNVD-2021-70105)
2021-09-10 00:00:00
cvelist
cvelist
CVE-2021-37629 Lack of ratelimit on Richdocuments OCS endpoint in nextcloud
2021-09-07 20:25:11
cve
cve
CVE-2021-37629
2021-09-07 21:15:08