Описание
Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server versions prior to 19.0.11, 20.0.10, or 21.0.2 send user IDs to the lookup server even if the user has no fields set to published. The vulnerability is patched in versions 19.0.11, 20.0.10, and 21.0.2; no workarounds outside the updates are known to exist.
Ссылки
- Third Party Advisory
- Permissions RequiredThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Permissions RequiredThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 19.0.11 (исключая)Версия от 20.0.0 (включая) до 20.0.10 (исключая)Версия от 21.0.0 (включая) до 21.0.2 (исключая)
Одно из
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00252
Низкий
2.7 Low
CVSS3
4 Medium
CVSS2
Дефекты
CWE-201
Связанные уязвимости
CVSS3: 2.7
debian
около 4 лет назад
Nextcloud Server is a Nextcloud package that handles data storage. Nex ...
EPSS
Процентиль: 48%
0.00252
Низкий
2.7 Low
CVSS3
4 Medium
CVSS2
Дефекты
CWE-201