CVE-2020-8228

CVE-2020-8228 describes a missing rate limit on the signup page in the Nextcloud Preferred Providers app (version 1.7.0), allowing an attacker to repeatedly set the password. The OpenSUSE security advisory (NC-SA-2020-033) and related OSS notes confirm this CVE and indicate it was addressed in th...

CVE-2020-8202

CVE-2020-8202 affects the Nextcloud Preferred Providers app (v1.6.0) due to improper input validation, allowing a denial-of-service when a very long password is entered. Root cause: input validation failure in the app. Impact: server DoS and potential unavailability. Mitigation: upgrade to 1.7.0 ...