Description (CNA)
A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Nextcloud Preferred Provider | affected Fixed in 1.8.0 |
CWE
CWE-840
References
- https://hackerone.com/reports/922470
- https://nextcloud.com/security/advisory/?id=NC-SA-2020-033
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00019.html
ADP enrichment
No English description supplied.