Nextcloud · Nextcloud · CVE-2023-25816
**Name of the Vulnerable Software and Affected Versions**
Nextcloud versions 25.0.0 through 25.0.2
**Description**
The issue is related to Uncontrolled Resource Consumption in Nextcloud, an Open Source private cloud software. A user can configure a very long password, which consumes more resources on password validation than desired, potentially leading to a denial of service. This can be exploited by a remote attacker.
**Recommendations**
For versions 25.0.0 through 25.0.2, update to version 25.0.3 to resolve the issue.
As a temporary workaround is not available, ensuring timely updates is crucial.