description: Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.
problem types: Improper Input Validation (CWE-20)
affected:
{
product: Nextcloud Server
vendor: HackerOne
versions:
status: affected, version: <12.0.3 <11.0.5
}