Description (CNA)
Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Nextcloud End-to-End Encryption | affected Fixed in 1.5.3, 1.6.3, 1.7.1 |
CWE
CWE-400
References
- https://hackerone.com/reports/1189174
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3829-45wm-ww36
ADP enrichment
No English description supplied.