You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
stondino00
changed the title
Dependency Update Moment.js to 2.29.4 in Nextcloud 24.0.4
Security Dependency Update Moment.js to 2.29.4 in Nextcloud 24.0.4
Aug 15, 2022
Hi, please update to 24.0.9 or better 25.0.3 and report back if it fixes the issue. Thank you!
My goal is to add a label like e.g. 25-feedback to this ticket of an up-to-date major Nextcloud version where the bug could be reproduced. However this is not going to work without your help. So thanks for all your effort!
Bug description
Nessus is reporting a security issue with Moment.js.
2.29.4
Release Jul 6, 2022
moment/moment#6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex
Steps to reproduce
Just scanned with nessus
Expected behavior
Show current 2.29.4 version
Installation method
No response
Operating system
No response
PHP engine version
No response
Web server
No response
Database engine version
No response
Is this bug present after an update or on a fresh install?
No response
Are you using the Nextcloud Server Encryption module?
No response
What user-backends are you using?
Configuration report
No response
List of activated Apps
Nextcloud Signing status
No response
Nextcloud Logs
No response
Additional info
No response
The text was updated successfully, but these errors were encountered: