CVE-2018-3762: Medium severity nextcloud server vulnerability
Published Jul 5, 2018
·Updated
Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.
Affected Software
2 affected components
Nextcloud Server<12.0.8
Nextcloud Server>=13.0.0<13.0.3
Event History
Jul 5, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-3762?
CVE-2018-3762 is classified as a medium severity vulnerability due to the potential exposure of unauthorized file previews.
2
How do I fix CVE-2018-3762?
To mitigate CVE-2018-3762, upgrade your Nextcloud Server to version 12.0.8 or 13.0.3 or later.
3
What does CVE-2018-3762 affect?
CVE-2018-3762 affects Nextcloud Server versions prior to 12.0.8 and 13.0.3.
4
What type of vulnerability is CVE-2018-3762?
CVE-2018-3762 is an access control vulnerability related to improper permission checks on shared files.
5
Can CVE-2018-3762 allow unauthorized access?
Yes, CVE-2018-3762 can allow users to request previews of files they should not have access to.