Medium severity4.3NVD Advisory· Published Oct 16, 2023· Updated Jun 17, 2026
CVE-2023-45148
CVE-2023-45148
Description
Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgrade should change their config setting memcache.distributed to \OC\Memcache\Redis and install Redis instead of Memcached.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*+ 4 more
- cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*range: >=22.0.0,<22.2.10.16
- cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*range: >=25.0.0,<25.0.11
- cpe:2.3:a:nextcloud:nextcloud_server:27.0.0:*:*:*:-:*:*:*
- cpe:2.3:a:nextcloud:nextcloud_server:27.0.0:*:*:*:enterprise:*:*:*
- (no CPE)range: before 25.0.11, 26.0.x before 26.0.6, 27.x before 27.1.0
- Range: before 25.0.11, 26.0.x before 26.0.6, 27.x before 27.1.0
- Range: >= 25.0.0, < 25.0.11
Patches
Vulnerability mechanics
References
3- github.com/nextcloud/server/pull/40293nvdIssue TrackingPatch
- github.com/nextcloud/security-advisories/security/advisories/GHSA-xmhp-7vr4-hp63nvdVendor Advisory
- hackerone.com/reports/2110945nvdPermissions Required
News mentions
0No linked articles in our index yet.