CVE-2018-3762

Опубликовано: 05 июл. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.

Ссылки

https://hackerone.com/reports/358339
Third Party Advisory
https://nextcloud.com/security/advisory/?id=nc-sa-2018-002
Broken Link
Vendor Advisory
https://hackerone.com/reports/358339
Third Party Advisory
https://nextcloud.com/security/advisory/?id=nc-sa-2018-002
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*

Версия до 12.0.8 (исключая)

cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*

Версия от 13.0.0 (включая) до 13.0.3 (исключая)

EPSS

Процентиль: 53%

0.00304

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284

CWE-281

Связанные уязвимости

CVE-2018-3762

CVSS3: 4.3

debian

почти 7 лет назад

Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks ...

GHSA-6p7m-f494-cjvp

CVSS3: 4.3

github

около 3 лет назад

Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.

openSUSE-SU-2018:1924-1

suse-cvrf

почти 7 лет назад

Security update for nextcloud

EPSS

Процентиль: 53%

0.00304

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284

CWE-281