CVEDB API

Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.9%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2018-3776

Nextcloud » Nextcloud Server » Version: 11.0.0

cpe:2.3:a:nextcloud:nextcloud_server:11.0.0
Nextcloud » Nextcloud Server » Version: 11.0.1

cpe:2.3:a:nextcloud:nextcloud_server:11.0.1
Nextcloud » Nextcloud Server » Version: 11.0.2

cpe:2.3:a:nextcloud:nextcloud_server:11.0.2
Nextcloud » Nextcloud Server » Version: 11.0.3

cpe:2.3:a:nextcloud:nextcloud_server:11.0.3
Nextcloud » Nextcloud Server » Version: 11.0.4

cpe:2.3:a:nextcloud:nextcloud_server:11.0.4
Nextcloud » Nextcloud Server » Version: 12.0.0

cpe:2.3:a:nextcloud:nextcloud_server:12.0.0
Nextcloud » Nextcloud Server » Version: 12.0.1

cpe:2.3:a:nextcloud:nextcloud_server:12.0.1
Nextcloud » Nextcloud Server » Version: 12.0.2

cpe:2.3:a:nextcloud:nextcloud_server:12.0.2