Lucene search
SpectreNC-SA-2020-021HistoryApr 20, 2020 - 12:00 a.m.
Code injection possible with malformed Nextcloud Talk chat commands (NC-SA-2020-021)
2020-04-2000:00:00
Spectre
nextcloud.com
24
EPSS
0.001
Percentile
46.0%
A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.
Related
cvelist
cvelist
CVE-2020-8180
2020-06-08 13:08:19
cve
cve
CVE-2020-8180
2020-06-08 14:15:13
osv
osv
CVE-2020-8180
2020-06-08 14:15:13
hackerone
hackerone
prion
prion
Code injection
2020-06-08 14:15:00
nvd
nvd
CVE-2020-8180
2020-06-08 14:15:13
rosalinux
rosalinux
Advisory ROSA-SA-2021-1983
2021-07-02 18:14:14