p PatchFirst

CVE-2017-0895

CVE-2017-0895

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed.

EPSS 0.7%

Published
Updated

Stack: applications

Affected products and versions

  • nextcloud

    Versions
    • before 10.0.4 and 11.0.2: Affected

    No fix published

Original sources

Check your server →