CVE-2018-16466
- Source
- https://cve.org/CVERecord?id=CVE-2018-16466
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16466.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-16466
- Published
- 2018-10-30T21:29:00Z
- Modified
- 2026-10-24T10:30:49Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.
- References
Affected packages
Git / github.com/nextcloud/server
Affected ranges
- Type
- GIT
- Repo
- https://github.com/nextcloud/server
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "fixed": "12.0.11" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*", "range": [ { "introduced": "13.0.0" }, { "fixed": "13.0.6" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta1:*:*:*:*:*:*", "range": [ { "introduced": "14.0.0-beta1" }, { "last_affected": "14.0.0-beta1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta2:*:*:*:*:*:*", "range": [ { "introduced": "14.0.0-beta2" }, { "last_affected": "14.0.0-beta2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta3:*:*:*:*:*:*", "range": [ { "introduced": "14.0.0-beta3" }, { "last_affected": "14.0.0-beta3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:beta4:*:*:*:*:*:*", "range": [ { "introduced": "14.0.0-beta4" }, { "last_affected": "14.0.0-beta4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:rc1:*:*:*:*:*:*", "range": [ { "introduced": "14.0.0-rc1" }, { "last_affected": "14.0.0-rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:14.0.0:rc2:*:*:*:*:*:*", "range": [ { "introduced": "14.0.0-rc2" }, { "last_affected": "14.0.0-rc2" } ], "source": "CPE_STRING" } ] }
Affected versions
14.*
14.0.0-beta1
14.0.0-beta2
14.0.0-beta3
14.0.0-beta4
14.0.0-rc1
14.0.0-rc2
theming-1.*
theming-1.4.5
v1.*
v1.0.0beta1
v11.*
v11.0.0
v11.0RC2
v12.*
v12.0.0
v12.0.0RC1
v12.0.0RC2
v12.0.0RC3
v12.0.0beta1
v12.0.0beta2
v12.0.0beta3
v12.0.0beta4
v12.0.1
v12.0.10
v12.0.10RC1
v12.0.11RC1
v12.0.1RC1
v12.0.1RC2
v12.0.1RC3
v12.0.1RC4
v12.0.1RC5
v12.0.3
v12.0.3RC1
v12.0.3RC2
v12.0.4
v12.0.4RC1
v12.0.4RC2
v12.0.4RC3
v12.0.5
v12.0.5RC1
v12.0.5RC2
v12.0.5RC3
v12.0.6
v12.0.6RC1
v12.0.7
v12.0.7RC1
v12.0.8
v12.0.8RC1
v12.0.9
v13.*
v13.0.0
v13.0.1
v13.0.1RC1
v13.0.2
v13.0.2RC1
v13.0.3
v13.0.3RC1
v13.0.3RC2
v13.0.4
v13.0.5
v13.0.5RC1
v13.0.5RC2
v13.0.6RC1
v14.*
v14.0.0RC1
v14.0.0RC2
v14.0.0beta1
v14.0.0beta2
v14.0.0beta3
v14.0.0beta4
v3.*
v3.0
v4.*
v4.0.0
v4.0.0RC
v4.0.0RC2
v4.0.0beta
v4.0.1
v4.0.4
v4.0.5
v4.0.6
v4.5.0
v4.5.0RC1
v4.5.0RC2
v4.5.0RC3
v4.5.0beta3
v4.5.0beta4
v5.*
v5.0.0
v5.0.0RC1
v5.0.0RC2
v5.0.0RC3
v5.0.0alpha1
v5.0.0beta1
v5.0.0beta2
v6.*
v6.0.0RC1
v6.0.0RC2
v6.0.0alpha2
v6.0.0beta2
v6.0.0beta3
v6.0.0beta4
v6.0.0beta5
v7.*
v7.0.0alpha2
v7.0.0beta1
v8.*
v8.0.0
v8.0.0RC1
v8.0.0RC2
v8.0.0alpha1
v8.0.0alpha2
v8.0.0beta1
v8.0.0beta2
v8.1.0alpha1
v8.1.0alpha2
v8.1.0beta1
v8.1.0beta2
v8.1RC2
v8.2RC1
v8.2beta1
v9.*
v9.0.0beta2
v9.0beta1
v9.1.0beta1