CVE-2018-16466CWE-284

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens

published October 30, 2018

CVSS
—
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00957 · 61.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2018-10-30T21:00Z
EPSS history
Timeline
  • 30 OCT 21:00Z
    Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens
    cvelistv5