VDB

CVE-2018-16467

CVE-2018-16467 PUBLISHED CVSS 5.300000190734863 MEDIUM

A missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the previews of single file password protected shares.

EPSS 1.07% · 64.8th percentile

Risk Scores

CVSS 3.0
5.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
1.07%
64.8th percentile

Affected Products

VendorProductVersions
nextcloudnextcloud_server0
n/aNextcloud Server<14.0.0

Timeline

  • CVE Published
  • Sep 25, 2018 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 26, 2021 EPSS Score
  • Oct 28, 2021 EPSS Score
  • Dec 31, 2021 EPSS Score
  • Mar 4, 2022 EPSS Score
  • May 6, 2022 EPSS Score
  • Jul 9, 2022 EPSS Score
  • Nov 14, 2022 EPSS Score
  • Jan 16, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›