NetSight
medium4.3

CVE-2020-8122

A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received.

Impact

A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received.

Affected products

VendorProductAffected versions
NextcloudNextcloud Server
before 12.0.13
from 13.0.0 before 13.0.8
from 14.0.0 before 14.0.4
from 14.0.5 before 15.0.0

Weakness classification

References