CVE-2018-3762CWE-284

Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for…

published July 5, 2018

CVSS
—
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00888 · 58.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2018-07-05T16:00Z
EPSS history
Timeline
  • 05 JUL 16:00Z
    Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for…
    cvelistv5