CVE-2020-8140

2020-03-2021:15:17

Google

osv.dev

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.4%

JSON

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.

CPENameOperatorVersion
desktopeq2.6.0-fix1
desktopeq2.6.2-rc1
desktopeq0.0.2
desktopeq1.6.1-rc1
desktopeq1.7.0-rc1
desktopeq2.0.2
desktopeq1.7.0beta1
desktopeq1.5.0
desktopeq1.5.3-rc1
desktopeq1.6.0-rc2

Name	Operator	Version
desktop	eq	2.6.0-fix1
desktop	eq	2.6.2-rc1
desktop	eq	0.0.2
desktop	eq	1.6.1-rc1
desktop	eq	1.7.0-rc1
desktop	eq	2.0.2
desktop	eq	1.7.0beta1
desktop	eq	1.5.0
desktop	eq	1.5.3-rc1
desktop	eq	1.6.0-rc2