CVE-2018-3761CWE-287

Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint

published July 5, 2018

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new tokens in case the OAuth2 client was partly compromised.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01657 · 76.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2018-07-05T16:00Z
EPSS history
Timeline
  • 05 JUL 16:00Z
    Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint
    cvelistv5