Non notée
CVE-2020-8189 A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links)…
Description
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Desktop Client | 2.6.5 | Pas de correctif indiqué |
Références
- hackerone.com hackerone.com
- nextcloud.com nextcloud.com
- GLSA-202009-09 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Desktop Client
Les 7 CVE de Desktop Client →
CVE-2020-8225
A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used…
Non notée
CVE-2020-8227
Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud…
Non notée
CVE-2020-8230
A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in…
Non notée
CVE-2020-8224
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL…
Non notée