Nextcloud: >> Nextcloud Server >> 13.0.8 Security Vulnerabilities
A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.
CVSS Score
5.7
EPSS Score
0.002
Published
2018-10-30
Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
CVSS Score
5.3
EPSS Score
0.001
Published
2018-10-30
A missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the previews of single file password protected shares.
CVSS Score
5.3
EPSS Score
0.002
Published
2018-10-30
Page 8