CVE-2020-8180

EPSS 1.7%CWE-94

A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.

Produtos afetados

n/a · Nextcloud Talk

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://hackerone.com/reports/851807 https://nextcloud.com/security/advisory/?id=NC-SA-2020-021