Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2020-8280
HistoryJan 06, 2021 - 9:15 p.m.

CVE-2020-8280

2021-01-0621:15:14
Google
osv.dev
2
nextcloud
contacts
file type check
svg
png
cross-site scripting

AI Score

6

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks.

Related

prion 1
nextcloud 1
hackerone 1
cve 1
cvelist 1
nvd 1
prion
prion
Cross site scripting
2021-01-06 21:15:00
nextcloud
nextcloud
XSS through image upload on contacts using svg file with png extension (NC-SA-2020-044)
2020-10-20 00:00:00
hackerone
hackerone
Nextcloud: XSS through image upload of contacts using svg file with png extension
2020-10-05 14:20:56
cve
cve
CVE-2020-8280
2021-01-06 21:15:14
cvelist
cvelist
CVE-2020-8280
2021-01-06 20:59:57
nvd
nvd
CVE-2020-8280
2021-01-06 21:15:14

AI Score

6

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON
Related for OSV:CVE-2020-8280
prion1nextcloud1hackerone1cve1cvelist1nvd1