CVE-2020-8293

—

CVSS 3.1

6.5 medium

EPSS

2%p74

Published

Jan 26, 2021 (Jan 26, 2021)

Modified

Jun 17, 2026

Description

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

Vendors: nextcloud
Products: nextcloud server
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.