Lucene search
LukasreschkencH1:1214158HistoryJun 01, 2021 - 12:10 p.m.
Nextcloud: Ratelimits do not apply to OCS DataResponse
2021-06-0112:10:56
lukasreschkenc
hackerone.com
22
0.002 Low
EPSS
Percentile
54.8%
Using $response->throttle() on a DataResponse doesn’t work as it is being transformed by BaseResponse into a OCS response. This response does not propagate any throttled setting.
Impact
Ratelimits on OCS DataResponse not functional.
Related
nvd
nvd
CVE-2021-32678
2021-07-12 13:15:07
nextcloud
nextcloud
Ratelimit not applied on OCS API responses
2021-07-12 09:14:26
cve
cve
CVE-2021-32678
2021-07-12 13:15:07
prion
prion
Authentication flaw
2021-07-12 13:15:00
cvelist
cvelist
CVE-2021-32678 Ratelimit not applied on OCS API responses
2021-07-12 12:25:11
osv
osv
CVE-2021-32678
2021-07-12 13:15:07
redhatcve
redhatcve
CVE-2021-32678
2022-05-20 23:47:46
openvas
openvas
Fedora: Security Advisory for nextcloud (FEDORA-2021-9b421b78af)
2021-07-27 00:00:00
Fedora: Security Advisory for nextcloud (FEDORA-2021-6f327296fe)
2021-07-27 00:00:00
Nextcloud Server Multiple Vulnerabilities (Jul 2021)
2021-07-16 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: nextcloud-20.0.11-1.fc34
2021-07-22 01:14:58
[SECURITY] Fedora 33 Update: nextcloud-19.0.13-1.fc33
2021-07-22 01:16:10
archlinux
archlinux
[ASA-202107-22] nextcloud: multiple issues
2021-07-14 00:00:00
suse
suse
Security update for nextcloud (important)
2021-07-21 00:00:00
nessus
nessus
openSUSE 15 Security Update : nextcloud (openSUSE-SU-2021:1068-1)
2021-07-21 00:00:00
GLSA-202208-17 : Nextcloud: Multiple Vulnerabilities
2022-08-16 00:00:00
gentoo
gentoo
Nextcloud: Multiple Vulnerabilities
2022-08-10 00:00:00