CVSS 3.0
5.3 mediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2018-16465
Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nextcloud:nextcloud_server