CVE-2021-22906

EPSS 0.7%CWE-400

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 jun 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users.

Productos afectados

n/a · Nextcloud End-to-End Encryption

Referencias

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3829-45wm-ww36 https://hackerone.com/reports/1189174