CVE-2017-0883

2017-04-0520:59:00

CWE-732

CWE-275

web.nvd.nist.gov

cve-2017-0883

nextcloud server

permission increase

ocs api

security vulnerability

nvd

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.4%

CPENameOperatorVersion
nextcloud:nextcloud_servernextcloud nextcloud serverle9.0.54
nextcloud:nextcloud_servernextcloud nextcloud servereq10.0.2

CPE	Name	Operator	Version
nextcloud:nextcloud_server	nextcloud nextcloud server	le	9.0.54
nextcloud:nextcloud_server	nextcloud nextcloud server	eq	10.0.2

References

hackerone.com/reports/169680

nextcloud.com/security/advisory/?id=nc-sa-2017-001