CVE:CVE-2022-39346
CNNVD:CNNVD-202211-3519
Nextcloud是德国Nextcloud公司的一套开源的自托管文件同步和共享的通信应用平台。
Nextcloud Server存在资源管理错误漏洞，该漏洞源于没有正确限制用户的显示名称，这可能允许恶意用户超载备份数据库并导致拒绝服务。
solution:Upgrade nextcloud nextcloud_enterprise_server to a higher version than 22.2.10,23.0.7,24.0.3,and avoid the version (,22.2.10),[23.0.0,23.0.7),[24.0.0,24.0.3); Upgrade nextcloud nextcloud_server to a higher version than 22.2.10,23.0.7,24.0.3,and avoid the version (,22.2.10),[23.0.0,23.0.7),[24.0.0,24.0.3); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37