Lucene search
GoogleOSV:CVE-2020-8281HistoryJan 06, 2021 - 9:15 p.m.
CVE-2020-8281
2021-01-0621:15:14
Google
osv.dev
2
nextcloud
contacts
missing file type check
xss
attacks
A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks.
Related
cvelist
cvelist
CVE-2020-8281
2021-01-06 20:58:09
hackerone
hackerone
Nextcloud: XSS through image upload of contacts using svg file
2020-06-09 21:06:51
nextcloud
nextcloud
XSS through image upload of contacts using svg file (NC-SA-2020-045)
2020-10-20 00:00:00
prion
prion
Cross site scripting
2021-01-06 21:15:00
nvd
nvd
CVE-2020-8281
2021-01-06 21:15:14
cve
cve
CVE-2020-8281
2021-01-06 21:15:14