Lucene search
HistoryJun 21, 2018 - 12:00 a.m.
File access control rules not applied to image previews (NC-SA-2018-002)
0.001 Low
EPSS
Percentile
21.9%
A missing check for read permissions allowed users that received an incomming share containing files tagged so they should be denied access to still request a preview for those files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud server | lt | 13.0.3 | |
| nextcloud server | lt | 12.0.8 |
Related
cve
cve
CVE-2018-3762
2018-07-05 16:29:00
nvd
nvd
CVE-2018-3762
2018-07-05 16:29:00
openvas
openvas
openSUSE: Security Advisory for nextcloud (openSUSE-SU-2018:1924-1)
2018-07-12 00:00:00
prion
prion
Input validation
2018-07-05 16:29:00
cvelist
cvelist
CVE-2018-3762
2018-07-05 16:00:00
osv
osv
CVE-2018-3762
2018-07-05 16:29:00
hackerone
hackerone
Nextcloud: File access control rules not enforced on image files
2018-05-28 15:24:21
nessus
nessus
openSUSE Security Update : nextcloud (openSUSE-2019-511)
2019-03-27 00:00:00
openSUSE Security Update : nextcloud (openSUSE-2018-712)
2018-07-12 00:00:00
suse
suse
Security update for nextcloud (moderate)
2018-07-11 21:07:57
redhatcve
redhatcve
CVE-2018-3761
2022-05-20 23:29:36