CVE-2020-8278

creationtimestamp| type| source ---|---|--- 2020-11-19 07:41:03+00:00| seen| https://t.me/cibsecurity/16572...

CVE-2020-8278

CVE-2020-8278 corresponds to a vulnerability in the Nextcloud Social app (version 0.3.1) where improper access control allows reading posts of any user. The root cause is missing authentication/authorization checks in the Social app’s access flow (notably the displayPost path in the ActivityPubCo...