description: An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to the endpoint.
problem types: Insecure Direct Object Reference (IDOR) (CWE-639)
affected:
{
product: Nextcloud Server
vendor: n/a
versions:
status: affected, version: 18.0.3
}