CVE-2023-32320
CVSS Score of 10 (low)
Details
Summary
CVE-2023-32320 affects Nextcloud Server versions 25.0.7 and 26.0.2, as well as Nextcloud Enterprise Server versions 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2. This vulnerability allows an attacker to send multiple requests in parallel, bypassing the configured limit of 8 requests and potentially brute-forcing protected details on the server. The issue has been patched in the mentioned versions of Nextcloud Server and Nextcloud Enterprise Server, reducing the risk posed by this vulnerability with a CVSS score of 8.7 (high severity). It is categorized as CWE-307 (IMPROPER RESTRICTION OF EXCESSIVE AUTHENTICATION ATTEMPTS) and has a potential impact on confidentiality and integrity of data stored on the affected servers. Note: The information provided is based on the given text describing the vulnerability and does not include any additional sources or external analysis beyond that description.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions