UpHeron
All vulnerabilities

Servers and applications

CVE-2020-8293

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

Severity
Medium 6.5
Published
26 Jan 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
18.0.11, 19.0.5, 20.0.2
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • Every version before 18.0.11
  • From 19.0.0 before 19.0.5
  • From 20.0.0 before 20.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8293
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8293