Nextcloud: >> Nextcloud Server >> 11.0.4 Security Vulnerabilities
Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.
CVSS Score
4.3
EPSS Score
0.003
Published
2018-07-05
Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user.
CVSS Score
5.7
EPSS Score
0.001
Published
2018-03-28
Page 9