Lucene search
PRIOn knowledge basePRION:CVE-2021-32741HistoryJul 12, 2021 - 10:15 p.m.
Code injection
2021-07-1222:15:00
PRIOn knowledge base
www.prio-n.com
2
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, there was a lack of ratelimiting on the public share link mount endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. There are no known workarounds.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud_server | ge | 21.0.0 | |
| nextcloud_server | lt | 21.0.3 | |
| nextcloud_server | ge | 20.0.0 | |
| nextcloud_server | lt | 20.0.11 | |
| nextcloud_server | lt | 19.0.13 |
Related
nextcloud
nextcloud
Lack of ratelimit on public share link mount endpoint
2021-07-12 09:24:34
cve
cve
CVE-2021-32741
2021-07-12 22:15:07
nvd
nvd
CVE-2021-32741
2021-07-12 22:15:07
hackerone
hackerone
Nextcloud: Add to your nextcloud endpoint is not properly protected
2021-05-11 13:56:27
osv
osv
CVE-2021-32741
2021-07-12 22:15:07
cvelist
cvelist
CVE-2021-32741 Lack of ratelimit on public share link mount endpoint
2021-07-12 22:05:12
openvas
openvas
Nextcloud Server Multiple Vulnerabilities (Jul 2021)
2021-07-16 00:00:00
openSUSE: Security Advisory for nextcloud (openSUSE-SU-2021:1068-1)
2021-07-21 00:00:00
archlinux
archlinux
[ASA-202107-22] nextcloud: multiple issues
2021-07-14 00:00:00
suse
suse
Security update for nextcloud (important)
2021-07-21 00:00:00
nessus
nessus
openSUSE 15 Security Update : nextcloud (openSUSE-SU-2021:1068-1)
2021-07-21 00:00:00