Lucene search
PRIOn knowledge basePRION:CVE-2023-28644HistoryMar 30, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-03-3019:15:00
PRIOn knowledge base
www.prio-n.com
3
nextcloud
server
performance impact
denial of service
upgrade
vulnerability
no workaround
Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact server performances and/or can lead to a denial of service. This issue has been addressed and it is recommended that the Nextcloud Server is upgraded to 25.0.3. There are no known workarounds for this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud_server | ge | 25.0.0 | |
| nextcloud_server | lt | 25.0.3 |
Related
nvd
nvd
CVE-2023-28644
2023-03-30 19:15:06
openvas
openvas
Nextcloud Server 25.x < 25.0.3 DoS Vulnerability (GHSA-9wmj-gp8v-477j)
2023-04-04 00:00:00
hackerone
hackerone
Nextcloud: Reference fetch can saturate the server bandwidth for 10 seconds
2022-12-15 09:44:50
cve
cve
CVE-2023-28644
2023-03-30 19:15:06
osv
osv
CVE-2023-28644
2023-03-30 19:15:06
cvelist
cvelist
nextcloud
nextcloud
Reference fetch can saturate the server bandwidth for 10 seconds
2023-03-30 08:13:24
redos
redos
ROS-20230418-01
2023-04-18 00:00:00