CVE-2022-39346: 
Linux Fedora vulnerability analysis and mitigation

CVE-2022-39346 affects Nextcloud server, an open source personal cloud server. The vulnerability was discovered and disclosed in 2022, where affected versions of Nextcloud server did not properly limit user display names. This security issue impacts all versions prior to 22.2.10, 23.0.7, and 24.0.3 (GitHub Advisory).

The vulnerability stems from a missing length validation of user display names, which could potentially lead to database overload. The issue has been assigned a CVSS v3.1 base score of 3.5 (Low severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N. The vulnerability is classified under CWE-400 (GitHub Advisory).

When exploited, this vulnerability allows malicious users to potentially cause a denial of service by overloading the backing database through sending huge amounts of data to the display name endpoint (GitHub Advisory).

The recommended mitigation is to upgrade Nextcloud Server to versions 22.2.10, 23.0.7, or 24.0.3. The same versions apply for Nextcloud Enterprise Server users. No alternative workarounds are available for this vulnerability (CVE Mitre, GitHub Advisory).