Test ID:	1.3.6.1.4.1.25623.1.0.126031
Category:	General
Title:	Nextcloud Server 24.x < 24.0.10, 25.x < 25.0.4 Missing Brute Force Protection Vulnerability (GHSA-v243-x6jc-42mp)
Summary:	Nextcloud Server is prone to a missing brute force protection; vulnerability.
Description:	Summary: Nextcloud Server is prone to a missing brute force protection vulnerability. Vulnerability Impact: A user could escalate their permissions to delete files they were not supposed to deletable but only viewed or downloaded. Affected Software/OS: Nextcloud Server versions 24.x prior to 24.0.10 and 25.x prior to 25.0.4. Solution: Update to version 24.0.10, 25.0.4 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:C/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-25818 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v243-x6jc-42mp https://github.com/nextcloud/server/pull/36489 https://github.com/nextcloud/server/pull/36489/commits/704eb3aa6cecc0a646f5cca4290b595f493f9ed3
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.