Lucene search
HackeroneCVELIST:CVE-2020-8224HistoryAug 10, 2020 - 1:35 p.m.
CVE-2020-8224
2020-08-1013:35:37
CWE-94
hackerone
www.cve.org
5
nextcloud desktop client
code injection
openssl config
arbitrary code
directory
EPSS
0.001
Percentile
38.8%
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
CNA Affected
[
{
"product": "Desktop Client",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Fixed in 2.6.5"
}
]
}
]Related
prion
prion
Code injection
2020-08-10 14:15:00
nextcloud
nextcloud
cve
cve
CVE-2020-8224
2020-08-10 14:15:13
debiancve
debiancve
CVE-2020-8224
2020-08-10 14:15:13
hackerone
hackerone
Nextcloud: Arbitrary code execution in desktop client via OpenSSL config
2019-06-20 15:20:18
nvd
nvd
CVE-2020-8224
2020-08-10 14:15:13
osv
osv
CVE-2020-8224
2020-08-10 14:15:13
gentoo
gentoo
Nextcloud Desktop Sync client: Multiple vulnerabilities
2020-09-13 00:00:00
nessus
nessus
GLSA-202009-09 : Nextcloud Desktop Sync client: Multiple vulnerabilities
2020-09-14 00:00:00