CVE-2020-8293 - AskarLabs CVE Database

CVE-2020-8293

Vendor N/A

Product Nextcloud Server

Weakness CWE-400

Published January 26, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

Key dates

02Disclosure timeline

January 26, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8293 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2026-48155 pypdf: Possible large memory usage for large offsets for layout mode text CVE-2025-61771 Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion) CVE-2025-21351 Windows Active Directory Domain Services API Denial of Service Vulnerability CVE-2023-39219 Admin Console Denial of Service via Java class enumeration CVE-2021-21294 Unbounded connection acceptance in http4s-blaze-server