CVE-2020-8280

Description

References

• hackerone.com/reports/998422 · Exploit
• nextcloud.com/security/advisory · Vendor Advisory

More vulnerabilities in contacts

• CVE-2025-66554MEDIUM 5.4Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2…
• CVE-2023-33182MEDIUM 4.3Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is convert…
• CVE-2021-39221MEDIUM 5.4Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Contacts application prior to version 4.0.3 was vulnerable to …
• CVE-2020-8281MEDIUM 5.4A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting …
• CVE-2020-8181MEDIUM 4.3A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.