| Package | Affected versions | Patched versions |
|---|---|---|
| nextcloud server | ≥ 16.0.0, < 16.0.9≥ 17.0.0, < 17.0.4≥ 18.0.0, < 18.0.1 | 16.0.917.0.418.0.1 |
A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free