Added |
CPE Configuration |
|
OR
*cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:* versions up to (excluding) 12.0.8
*cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (excluding) 13.0.3
*cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta1:*:*:*:*:*:*
*cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta2:*:*:*:*:*:*
*cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta3:*:*:*:*:*:*
*cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta4:*:*:*:*:*:*
*cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:rc1:*:*:*:*:*:*
*cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:rc2:*:*:*:*:*:*
|
Added |
CVSS V2 |
|
(AV:N/AC:H/Au:S/C:P/I:P/A:N)
|
Added |
CVSS V2 Metadata |
|
Victim must voluntarily interact with attack mechanism
|
Added |
CVSS V3 |
|
AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N
|
Added |
CWE |
|
CWE-384
|
Changed |
Reference Type |
https://hackerone.com/reports/237184 No Types Assigned
|
https://hackerone.com/reports/237184 Third Party Advisory
|
Changed |
Reference Type |
https://nextcloud.com/security/advisory/?id=NC-SA-2018-013 No Types Assigned
|
https://nextcloud.com/security/advisory/?id=NC-SA-2018-013 Vendor Advisory
|