CVE-2021-22906

EPSS 0.7%CWE-400

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 jun 2021Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users.

Produtos afetados

n/a · Nextcloud End-to-End Encryption

Referências

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3829-45wm-ww36 https://hackerone.com/reports/1189174