CVE-2017-0892

Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file.

Score

CVSS 3.1 3.5 Low

Status

Modified - support@hackerone.com

Published

2017-05-08

Last modified

2024-08-05

Weaknesses

CWE-285, CWE-384

Affected products

• Nextcloud Server (Nextcloud)

References

• https://hackerone.com/reports/191979
• https://nextcloud.com/security/advisory/?id=nc-sa-2017-009