high7.8
CVE-2020-8224
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
Impact
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Desktop | before 2.6.5 |