medium4.3
CVE-2020-8181
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.
Impact
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Contacts | before 3.3.0 |