CVE-2018-3776

CVE-2018-3776

Vendor Hackerone

Product Nextcloud Server

Weakness CWE-20 · Input validation

Published August 12, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.

Key dates

02Disclosure timeline

August 12, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-3776 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html

Related vulnerabilities

04Related CVE

CVE-2021-34570 Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS CVE-2026-44343 WGDashboard: Critical Vulnerability in 4.3.2 CVE-2025-13762 Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305 CVE-2026-44518 liboqs: XMSS Buffer Overread Bug CVE-2022-47937 Multiple parsing problems in the Apache Sling Commons JSON module