Поиск уязвимостей
Количество 5
Количество 5
CVE-2017-0936
Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user.
CVE-2017-0936
Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorizatio ...
openSUSE-SU-2018:1040-1
Security update for nextcloud
GHSA-84fw-wvq7-7x27
Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user.
ALT-PU-2018-1297
ALT-PU-2018-1297: package `nextcloud` update to version 13.0.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-0936 Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user. | CVSS3: 5.7 | 1% Низкий | больше 8 лет назад |
| CVE-2017-0936 Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorizatio ... | CVSS3: 5.7 | 1% Низкий | больше 8 лет назад |
 | openSUSE-SU-2018:1040-1 Security update for nextcloud | 1% Низкий | больше 8 лет назад | |
| GHSA-84fw-wvq7-7x27 Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user. | CVSS3: 5.7 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2018-1297 ALT-PU-2018-1297: package `nextcloud` update to version 13.0.0-alt1 | CVSS3: 5.7 | 1% Низкий | больше 8 лет назад |
Уязвимостей на страницу