CVE-2020-8155

MÉDIO 5.4CVE-2020-8155 · Published 12/05/2020 · updated 17/06/2026

Em resumo

CVE-2020-8155 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta nextcloud server (nextcloud).
Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 66.6% das vulnerabilidades.
Correção: atualize para 18.0.3 ou posterior.

Package	Affected versions	Patched versions
nextcloud server nextcloud	`< 18.0.3`	`18.0.3`

Description

An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.

References

lists.opensuse.org/opensuse-security-announce/2020-05/msg00037.html
lists.opensuse.org/opensuse-security-announce/2020-05/msg00038.html
lists.opensuse.org/opensuse-security-announce/2020-05/msg00040.html
lists.opensuse.org/opensuse-security-announce/2020-10/msg00019.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP
nextcloud.com/security/advisory · Vendor Advisory

Mais vulnerabilidades de nextcloud server

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nextcloud server

nextcloud

< 18.0.3

18.0.3

Mais vulnerabilidades de nextcloud server

Ver tudo →