CVE-2020-8181CWE-840

CVE-2020-8181: vulnerability in Nextcloud Contact

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.
Affected products
n/a · Nextcloud Contact