CVE-2020-8280

概要

参考情報

• hackerone.com/reports/998422 · Exploit
• nextcloud.com/security/advisory · Vendor Advisory

contacts のその他の脆弱性

• CVE-2025-66554中 5.4Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2…
• CVE-2023-33182中 4.3Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is convert…
• CVE-2021-39221中 5.4Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Contacts application prior to version 4.0.3 was vulnerable to …
• CVE-2020-8281中 5.4A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting …
• CVE-2020-8181中 4.3A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.