Описание
Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.
Ссылки
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 11.0.0 (включая) до 11.0.5 (исключая)Версия от 12.0.0 (включая) до 12.0.3 (исключая)
Одно из
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.0055
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20
CWE-532
Связанные уязвимости
CVSS3: 5.3
ubuntu
почти 7 лет назад
Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.
CVSS3: 5.3
debian
почти 7 лет назад
Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0. ...
CVSS3: 5.3
github
около 3 лет назад
Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.
EPSS
Процентиль: 67%
0.0055
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20
CWE-532