UpHeron
All vulnerabilities

Servers and applications

CVE-2021-41177

Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, Nextcloud Server did not implement a database backend for rate-limiting purposes. Any component of Nextcloud using rate-limits (as as `AnonRateThrottle` or `UserRateThrottle`) was thus not rate limited on instances not having a memory cache backend configured. In the case of a default…

Severity
High 8.1
Published
25 Oct 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
20.0.13, 21.0.5, 22.2.0
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • Every version before 20.0.13
  • From 21.0.0 before 21.0.5
  • From 22.0.0 before 22.2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41177
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41177