CVE-2017-0895CWE-285

Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users

published May 8, 2017

CVSS
—
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.3th percentile
Weakness
CWE-285 · Improper Authorization
Published
2017-05-08T20:00Z
EPSS history
Timeline
  • 08 MAY 20:00Z
    Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users
    cvelistv5