description: A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.
problem types: Business Logic Errors (CWE-840)
affected:
{
product: Nextcloud Preferred Provider
vendor: n/a
versions:
status: affected, version: Fixed in 1.8.0
}