Lucene search

K
osvGoogleOSV:CVE-2020-8139
HistoryMar 20, 2020 - 9:15 p.m.

CVE-2020-8139

2020-03-2021:15:17
Google
osv.dev
6

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

40.0%

A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL.

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

40.0%