6.5
CVE-2017-0886
- EPSS 1.23%
- Veröffentlicht 05.04.2017 20:59:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Quelle support@hackerone.com
- CVE-Watchlists
- Unerledigt
LoginNextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nextcloud ≫ Nextcloud Server Version < 9.0.55
Nextcloud ≫ Nextcloud Server Version >= 10.0.0 < 10.0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.23% | 0.65 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
CWE-674 Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
https://hackerone.com/reports/174524
https://nextcloud.com/security/advisory/?id=nc-sa-2017-004