← CVE Intelligence

CVE-2018-3761

Nextcloud / Nextcloud Server PUBLISHED

Description (CNA)

Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new tokens in case the OAuth2 client was partly compromised.

Affected (CNA)

Vendor / productVersions
Nextcloud / Nextcloud Serveraffected <13.0.3, <12.0.8

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.