Lucene search
HackeroneCVELIST:CVE-2020-8281HistoryJan 06, 2021 - 8:58 p.m.
CVE-2020-8281
2021-01-0620:58:09
CWE-79
hackerone
www.cve.org
6
nextcloud
contacts
xss
file type check
security vulnerability
EPSS
0.001
Percentile
24.8%
A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks.
CNA Affected
[
{
"product": "Nextcloud Contacts",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Fixed in 3.4.0"
}
]
}
]Related
hackerone
hackerone
Nextcloud: XSS through image upload of contacts using svg file
2020-06-09 21:06:51
osv
osv
CVE-2020-8281
2021-01-06 21:15:14
nextcloud
nextcloud
XSS through image upload of contacts using svg file (NC-SA-2020-045)
2020-10-20 00:00:00
prion
prion
Cross site scripting
2021-01-06 21:15:00
nvd
nvd
CVE-2020-8281
2021-01-06 21:15:14
cve
cve
CVE-2020-8281
2021-01-06 21:15:14