Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.
{
"cpe": [
"cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
"cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta1:*:*:*:*:*:*",
"cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta2:*:*:*:*:*:*",
"cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta3:*:*:*:*:*:*",
"cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta4:*:*:*:*:*:*",
"cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:rc1:*:*:*:*:*:*",
"cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:rc2:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "12.0.11"
},
{
"introduced": "13.0.0"
},
{
"fixed": "13.0.6"
},
{
"introduced": "14.0.0-beta1"
},
{
"last_affected": "14.0.0-beta1"
},
{
"introduced": "14.0.0-beta2"
},
{
"last_affected": "14.0.0-beta2"
},
{
"introduced": "14.0.0-beta3"
},
{
"last_affected": "14.0.0-beta3"
},
{
"introduced": "14.0.0-beta4"
},
{
"last_affected": "14.0.0-beta4"
},
{
"introduced": "14.0.0-rc1"
},
{
"last_affected": "14.0.0-rc1"
},
{
"introduced": "14.0.0-rc2"
},
{
"last_affected": "14.0.0-rc2"
}
],
"source": [
"CPE_RANGE",
"CPE_STRING"
]
}