Lucene search

K
nextcloudLukas ReschkeNC-SA-2017-011
HistoryMay 08, 2017 - 12:00 a.m.

Share tokens for public calendars disclosed (NC-SA-2017-011)

2017-05-0800:00:00
Lukas Reschke
nextcloud.com
5

0.001 Low

EPSS

Percentile

33.1%

A logical error caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.

CPENameOperatorVersion
nextcloud serverlt11.0.3

0.001 Low

EPSS

Percentile

33.1%