CVE-2020-8122

Summary

A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received.

Affected Software

Weaknesses

• CWE-284: Improper Access Control - Generic (CWE-284)

ADP Enrichment

CVE Program Container

Additional References

• https://hackerone.com/reports/447494
• https://nextcloud.com/security/advisory/?id=NC-SA-2019-002

References

• https://hackerone.com/reports/447494
• https://nextcloud.com/security/advisory/?id=NC-SA-2019-002

• ←Previous
• Next→