Lucene search
Mikael KarlssonNC-SA-2018-003HistoryJun 21, 2018 - 12:00 a.m.
Improper validation on OAuth2 token endpoint (NC-SA-2018-003)
2018-06-2100:00:00
Mikael Karlsson
nextcloud.com
12
EPSS
0.002
Percentile
57.4%
Improper validation of input allowed an attacker with access to the OAuth2 refresh token to obtain new tokens.
Related
hackerone
hackerone
Nextcloud: OAuth2 Access Token and App Password Security Vulnerability
2018-04-25 17:03:37
cve
cve
CVE-2018-3761
2018-07-05 16:29:00
prion
prion
Authentication flaw
2018-07-05 16:29:00
nvd
nvd
CVE-2018-3761
2018-07-05 16:29:00
osv
osv
CVE-2018-3761
2018-07-05 16:29:00
openvas
openvas
Nextcloud Server < 12.0.8, < 13.0.3 Improper Input Vulnerability (NC-SA-2018-003)
2020-02-07 00:00:00
openSUSE: Security Advisory for nextcloud (openSUSE-SU-2018:1924-1)
2018-07-12 00:00:00
cvelist
cvelist
CVE-2018-3761
2018-07-05 16:00:00
nessus
nessus
openSUSE Security Update : nextcloud (openSUSE-2019-511)
2019-03-27 00:00:00
openSUSE Security Update : nextcloud (openSUSE-2018-712)
2018-07-12 00:00:00
redhatcve
redhatcve
CVE-2018-3761
2022-05-20 23:29:36
suse
suse
Security update for nextcloud (moderate)
2018-07-11 21:07:57