CVE-2020-8295

CVE-2020-8295

Vendor N/A

Product Nextcloud Server

Weakness CWE-400

Published January 26, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.

Key dates

02Disclosure timeline

January 26, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8295 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2026-34826 Rack: Unbounded Range Count in get_byte_ranges Enables DoS CVE-2023-20051 Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability CVE-2022-21653 Hash collision in typelevel jawn CVE-2022-34335 IBM Sterling Partner Engagement Manager denial of service CVE-2026-50645 Apache CXF: No restriction on attachment headers per message