CVE-2018-3776

Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.

Score

CVSS 3.1 5.3 Medium

Status

Modified - support@hackerone.com

Published

2018-08-12

Last modified

2024-08-05

Weaknesses

CWE-20, CWE-532

Affected products

• Nextcloud Server (Hackerone)
• Nextcloud Server (Nextcloud)

References

• https://hackerone.com/reports/232347
• https://nextcloud.com/security/advisory/?id=NC-SA-2018-006