CVE-2020-8154CWE-639

An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious…

published May 12, 2020

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to the endpoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01773 · 78.0th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2020-05-12T13:01Z
EPSS history
Timeline
  • 12 MAY 13:01Z
    An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious…
    cvelistv5