medium5.4
CVE-2020-8189
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the log…
Impact
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Desktop | before 2.6.5 |