CVE-2017-0887

4.3MEDIUM

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary

发布于: 4/5/2017更新于: 4/20/2025
在NVD查看在MITRE查看

描述

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.

AI分析AI驱动

受影响产品

nextcloudnextcloud_server
nextcloudnextcloud_server

参考资料