p PatchFirst

CVE-2018-3762

CVE-2018-3762

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.

EPSS 0.9%

Published
Updated

Stack: applications

Affected products and versions

  • nextcloud

    Versions
    • <13.0.3, <12.0.8: Affected

    No fix published

Original sources

Check your server →