CVE-2021-37629 Lack of ratelimit on Richdocuments OCS endpoint in nextcloud
Attackers can enumerate valid share tokens due to missing rate limits on the Richdocuments OCS endpoint, exposing sensitive sharing information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-37629?
CVE-2021-37629 is a medium-severity vulnerability in nextcloud security-advisories, published on 7 Sep 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Nextcloud Richdocuments is an open source collaborative office suite. In affected versions there is a lack of rate limiting on the Richdocuments OCS endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. It is recommended that the Nextcloud Richdocuments app is upgraded to either 3.8.4 or 4.2.1 to resolve. For users unable to upgrade it is recommended that the Richdocuments application be disabled.
Which versions are affected by CVE-2021-37629?
It affects 1 product.
Products include Nextcloud Richdocuments.
How do I fix CVE-2021-37629?
No fix has been published for CVE-2021-37629 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-37629 being exploited?
There is no known exploitation of CVE-2021-37629 in the wild and no public exploit code.
Other vulnerabilities in nextcloud security-advisories
- CVE-2021-37628 File Drop can be bypassed using Richdocuments app in nextcloud
- CVE-2022-31024 Federated editing allows iframing remote servers by default in richdocuments
- CVE-2023-25150 Document content of files can be obtained through Collabora for files of other users
- CVE-2023-28645 Secure view can be bypassed by using internal API endpoint in Nextcloud richdocuments
- CVE-2021-39223 File path disclosure of shared files in Richdocuments application
Sources
Also known as GHSA-gvvr-h36p-8mjx.