Hackerone Nextcloud Server vulnerabilities

2 vulnerabilities

Known vulnerabilities in Hackerone Nextcloud Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-3775hackeronenextcloud server+1
EPSS score
1.23%
Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor Authentication.5.3CVE-2018-3776hackeronenextcloud server+1
EPSS score
1.26%
Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.