Nextcloud · Report #1147611
DoS due to improper input validation can break the admin access into the user data will disallow him from editing that user's data.
Validstatus
highseverity
4upvotes
1 Jun 2021disclosed
Summary
Impact
A malicious user may be able to break the user administration page. This would disallow administrators to administrate users on the Nextcloud instance.
Patches
It is recommended that the Nextcloud Server is upgraded to 19.0.11, 20.0.10 or 21.0.2
Workarounds
Use the OCC command line tool to administrate the Nextcloud users.
References
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.