CVE-2020-8139CWE-284

A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to…

published March 20, 2020

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01536 · 74.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-03-20T20:14Z
EPSS history
Timeline
  • 20 MAR 20:14Z
    A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to…
    cvelistv5