Unscored CVE-2018-16466 EUVD-2018-8302GHSA-6mm6-pp6h-9p36

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by a…

Published Oct 30, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Description

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.

Affected products

Vendor	Product	Affected	Fixed
—	Nextcloud Server	<14.0.0, <13.0.6, <12.0.11	—

References

https://hackerone.com/reports/388515
https://nextcloud.com/security/advisory/?id=NC-SA-2018-010