CVE-2020-8223

2020-10-0514:15:13

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.8%

JSON

A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves.

CPENameOperatorVersion
servereq15.0.0RC1
servereq4.5.0beta4
servereq5.0.0beta2
servereq8.2beta1
servereq11.0RC2
servereq5.0.0RC1
servereq16.0.0alpha1
servereq6.0.0beta3
servereq6.0.0RC2
servereq14.0.0beta1

Name	Operator	Version
server	eq	15.0.0RC1
server	eq	4.5.0beta4
server	eq	5.0.0beta2
server	eq	8.2beta1
server	eq	11.0RC2
server	eq	5.0.0RC1
server	eq	16.0.0alpha1
server	eq	6.0.0beta3
server	eq	6.0.0RC2
server	eq	14.0.0beta1