Approved changes feed: RSS · Atom

cpe:2.3:a:nextcloud:nextcloud_server:10.0.2:*:*:*:*:*:*:*

part: a version: 10.0.2 update: *

VendorNextcloud (e5ae4298-6932-564f-a40d-08cebea039a5)
ProductNextcloud Server (1b3f7567-9687-57ec-81e9-325dd62e7470)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/nextcloud/server purl2cpe 2026-06-01 10:17:58.950507

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-0888 vulnerable 2026-06-03 14:36:19.495845 Details available
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.
Published: 2017-04-05T20:00:00.000Z
Updated: 2024-08-05T13:18:06.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0883 vulnerable 2026-06-03 14:36:19.494186 Details available
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for.
Published: 2017-04-05T20:00:00.000Z
Updated: 2024-08-05T13:18:06.386Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.