CVE-2021-22906
First published: Fri Jun 11 2021(Updated: )
Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nextcloud End-to-End Encryption | <1.5.3 | |
| Nextcloud End-to-End Encryption | >=1.6.0<1.6.3 | |
| Nextcloud End-to-End Encryption | >=1.7.0<1.7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-22906?
The severity of CVE-2021-22906 is rated as medium with a CVSS score of 6.5.
How can I mitigate CVE-2021-22906 vulnerability?
To mitigate CVE-2021-22906 vulnerability, it is recommended to update Nextcloud End-to-End Encryption to version 1.5.3, 1.6.3, or 1.7.1.
What is the CWE associated with CVE-2021-22906?
CVE-2021-22906 is associated with CWE-639 and CWE-400 vulnerabilities.
- collector/nvd-index
- vendor/nextcloud
- product/end-to-end encryption
- canonical/nextcloud end-to-end encryption