Lucene search

K
nextcloudTommy SurielNC-SA-2020-024
HistoryApr 16, 2020 - 12:00 a.m.

Limit contacts photo uploading to images (NC-SA-2020-024)

2020-04-1600:00:00
Tommy Suriel
nextcloud.com
11

EPSS

0.001

Percentile

22.7%

A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.

EPSS

0.001

Percentile

22.7%

Related for NC-SA-2020-024