CVE-2022-41968

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 23.0.10 and 24.0.5 contain patches for the issue. No known workarounds are available.

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 23.0.10 and 24.0.5 contain patches for the issue. No known workarounds are available.

Nextcloud Server es un servidor en la nube personal de código abierto. Antes de las versiones 23.0.10 y 24.0.5, las longitudes de los nombres del calendario no se validan antes de escribir en una base de datos. Como resultado, un atacante puede enviar cantidades innecesarias de datos a la base de datos. Las versiones 23.0.10 y 24.0.5 contienen parches para el problema. No hay workarounds disponibles.