← CVE Intelligence

CVE-2018-3762

Nextcloud / Nextcloud Server PUBLISHED

Description (CNA)

Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.

Affected (CNA)

Vendor / productVersions
Nextcloud / Nextcloud Serveraffected <13.0.3, <12.0.8

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.