Servers and applications
CVE-2022-41968
Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 23.0.10 and 24.0.5 contain patches for the issue. No known workarounds are available.
- Severity
- Medium 5.3
- Published
- 1 Dec 2022
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 23.0.10, 24.0.5
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server |
|