CVE-2021-22915
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations. This could potentially result in an attacker bypassing rate-limit controls such as the Nextcloud brute-force protection.
Affected Platforms (CPE)
📦
Nextcloud
Nextcloud Server
< 19.0.11📦
Nextcloud
Nextcloud Server
>= 20.0.0 and < 20.0.10📦
Nextcloud
Nextcloud Server
>= 21.0.0 and < 21.0.2💻
Fedoraproject
Fedora
= 33💻
Fedoraproject