high7.4
CVE-2020-8279
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
Impact
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Social | before 0.4.0 |