CVE-2018-16465CWE-287

CVE-2018-16465: vulnerability in Nextcloud Server

Published · Updated

Follow this CVE+ Monitor Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
Affected products
n/a · Nextcloud Server