Nextcloud Server (Hackerone) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-08-12. Vendor: Hackerone.

CVEs of Nextcloud Server

• CVE-2018-3776 - CVSS 5.3 (medium), 2018-08-12: Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.
• CVE-2018-3775 - CVSS 8.8 (high), 2018-08-12: Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor…