CVE-2020-8278 Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user

Description

Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.

Affected products and versions

Product	Affected versions	Fixed in
Nextcloud Social	Versions not published

Other CVEs of Nextcloud Social

The 2 CVEs of Nextcloud Social →

CVE-2020-8279 Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a… Not rated