NetSight
high8.1

CVE-2018-16466

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.

Impact

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.

Affected products

VendorProductAffected versions
NextcloudNextcloud Server
before 12.0.11
from 13.0.0 before 13.0.6
Version 14.0.0

Weakness classification

References