CVE-2023-28644

MEDIUM

Nextcloud Server 25.0.0-25.0.2 - Denial of Service via Inefficient Fetch Operation

Title source: llm
STIX 2.1

Description

Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact server performances and/or can lead to a denial of service. This issue has been addressed and it is recommended that the Nextcloud Server is upgraded to 25.0.3. There are no known workarounds for this vulnerability.

References (2)

Core 2
Core References
Issue Tracking, Patch x_refsource_misc
https://github.com/nextcloud/server/pull/36016

Scores

CVSS v3 5.7
EPSS 0.0050
EPSS Percentile 66.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (1)
nextcloud/nextcloud_server 25.0.0 - 25.0.3
Published Mar 30, 2023
Tracked Since Feb 18, 2026