Not rated
CVE-2020-8155 An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting…
Description
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Nextcloud Server | 18.0.3 | No fix stated |
References
- nextcloud.com nextcloud.com
- openSUSE-SU-2020:0667 lists.opensuse.org
- openSUSE-SU-2020:0668 lists.opensuse.org
- openSUSE-SU-2020:0670 lists.opensuse.org
- openSUSE-SU-2020:1652 lists.opensuse.org
- FEDORA-2020-c9863904de lists.fedoraproject.org
Timeline
- Published
- Last modified
Other CVEs of Nextcloud Server
The 40 CVEs of Nextcloud Server →
CVE-2021-22915
Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6…
Not rated
CVE-2020-8296
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured
Not rated
CVE-2021-22878
Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in…
Not rated
CVE-2021-22877
A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users…
Not rated