CVE-2017-0894
CVE-2017-0894
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.
EPSS 1.2%
- Published
- Updated
Stack: applications
Affected products and versions
nextcloud
- Versions
- before 11.0.3: Affected
No fix published