CVE-2020-8117

Summary

Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event.

Affected Software

Weaknesses

• CWE-280: Improper Handling of Insufficient Permissions or Privileges (CWE-280)

ADP Enrichment

CVE Program Container

Additional References

• https://hackerone.com/reports/439828
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-013

References

• https://hackerone.com/reports/439828
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-013

• ←Previous
• Next→