CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2021-22906
Medium (6.5) in nextcloud end-to-end encryption. EPSS 0.7% chance of exploitation in the next 30 days.
Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-639, CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nextcloud:end-to-end_encryption