VDB
CVE-2018-3762
CVE-2018-3762
PUBLISHED
Reported by hackerone · Published July 5, 2018
Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nextcloud | Nextcloud Server | <13.0.3, <12.0.8 |
| Nextcloud | Nextcloud Server | <13.0.3, <12.0.8, <13.0.3, <12.0.8 |
Timeline
- CVE Published
- Jun 15, 2018 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 28, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Mar 3, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Nov 12, 2022 EPSS Score
- Jan 14, 2023 EPSS Score