Lucene search
PRIOn knowledge basePRION:CVE-2023-25816HistoryFeb 25, 2023 - 12:15 a.m.
Design/Logic Flaw
2023-02-2500:15:00
PRIOn knowledge base
www.prio-n.com
3
nextcloud
open source
private cloud
vulnerability
uncontrolled resource consumption
password validation
Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A user can configure a very long password, consuming more resources on password validation than desired. This issue is patched in 25.0.3 No workaround is available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud_server | ge | 25.0.0 | |
| nextcloud_server | lt | 25.0.3 | |
| nextcloud_server | ge | 25.0.0 | |
| nextcloud_server | lt | 25.0.3 |
Related
osv
osv
CVE-2023-25816
2023-02-25 00:15:11
openvas
openvas
Nextcloud Server 25.x < 25.0.3 DoS Vulnerability (GHSA-53q2-cm29-7j83)
2023-04-14 00:00:00
cvelist
cvelist
CVE-2023-25816 nextcloud vulnerable to Uncontrolled Resource Consumption
2023-02-24 23:17:41
nextcloud
nextcloud
No password length restriction in reset password endpoint
2023-02-24 07:22:47
cve
cve
CVE-2023-25816
2023-02-25 00:15:11
nvd
nvd
CVE-2023-25816
2023-02-25 00:15:11
hackerone
hackerone
Nextcloud: No password length restriction in reset password endpoint
2023-01-03 08:44:39
redos
redos
ROS-20230413-01
2023-04-13 00:00:00