CVE-2018-16463 - AskarLabs CVE Database

CVE-2018-16463

Vendor N/A

Product Nextcloud Server

Weakness CWE-384 · Session fixation

Published October 30, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.

Key dates

02Disclosure timeline

October 30, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-16463 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/384.html

Related vulnerabilities

04Related CVE

CVE-2022-33927 CVE-2025-8517 givanz Vvveb session fixiation CVE-2023-29019 Session fixation in fastify-passport CVE-2025-29928 authentik's deletion of sessions did not revoke sessions when using database session storage CVE-2024-24823 graylog2-server Session Fixation vulnerability through cookie injection