Skip to content
Sign in
Not rated

CVE-2020-8280 A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to…

Description

A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks.

Affected products and versions

Product Affected versions Fixed in
Nextcloud Contacts Versions not published

Other CVEs of Nextcloud Contacts

The 2 CVEs of Nextcloud Contacts →
CVE-2020-8281 A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform… Not rated
Track this CVE