地图 / DoS due to improper input validation can break the admin access into the user data will disallow him from editing that user's data.

DoS due to improper input validation can break the admin access into the user data will disallow him from editing that user's data.

拒绝服务 / 资源消耗失控 / #1147611

厂商: Nextcloud
严重程度: 中危
赏金: —
弱点: 资源消耗失控
研究员: @demonia
披露日期: 2021-06-01
资产: nextcloud/server
CVE: CVE-2021-32657

该报告还没有中文解读。

时间线

2021-04-03报告提交
2021-06-01公开披露

阅读 HackerOne 原文 ↗作者 @demonia · 版权归作者与 Nextcloud 所有

同类报告

DoS on PayPal via web cache poisoningPayPal · 2019-10-23 · $9,700 profile-picture name parameter with large value lead to DoS for other users and programs on the platformHackerOne · 2020-03-25 Denial of service to WP-JSON API by cache poisoning the CORS allow origin headerAutomattic · 2020-04-16 [Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableX / xAI · 2019-04-25 Oracle Webcenter Sites administrative and hi-privilege access available directly from the internet (/cs/Satellite)LocalTapiola · — · $18,000 Denial of service via cache poisoningHackerOne · 2018-12-22 · $2,500