Not rated
CVE-2020-8181 A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars
Description
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Nextcloud Contact | 3.3.0 | No fix stated |