CVE-2020-8133

🗓️ 09 Nov 2020 14:25:24Reported by hackeroneType

A vulnerability in Nextcloud Server 19.0.1 allowed block overwrit

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-8133	9 Nov 202018:55	–	circl
CNVD	Nextcloud Server Encryption Block Password Phrase Generation Error Vulnerability	10 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-8133	9 Nov 202014:25	–	cvelist
EUVD	EUVD-2020-29034	7 Oct 202500:30	–	euvd
Hacker One	Nextcloud: Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file	26 Jul 201911:03	–	hackerone
Nextcloud	Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file (NC-SA-2020-038)	26 Aug 202000:00	–	nextcloud
NVD	CVE-2020-8133	9 Nov 202015:15	–	nvd
OpenVAS	Nextcloud Server File Block Overwrite Vulnerability (NC-SA-2020-038)	1 Dec 202000:00	–	openvas
Prion	Design/Logic Flaw	9 Nov 202015:15	–	prion
SUSE CVE	SUSE CVE-2020-8133	15 Feb 202304:01	–	susecve

NVD

Vulners

Node

nextcloud nextcloud_serverMatch19.0.1

[
  {
    "product": "Nextcloud Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "19.0.2"
      }
    ]
  }
]

Source	Link
nextcloud	www.nextcloud.com/security/advisory/
hackerone	www.hackerone.com/reports/661051%2C
hackerone	www.hackerone.com/reports/661051

21 Nov 2024 05:38Current

5.1Medium risk

Vulners AI Score5.1

CVSS 25

CVSS 3.15.3

EPSS0.00169