CVE-2020-8122

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-8122
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8122.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-8122
Published
2020-02-04T20:15:14.387Z
Modified
2026-07-09T00:07:16.464580Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received.

References

Affected packages

Git / github.com/nextcloud/server

Affected ranges

Type
GIT
Repo
https://github.com/nextcloud/server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0b8b083f72a59210ca7bf7c8c2f3b3f93c1ca880
Introduced
3b4285e13f6b1ec074b98466f49e189101f090bc
Fixed
a966d7f9caeb3116024454ec44c45923ada85ad7
Introduced
1b35dc1cbafe318933ba0c11212a9c3c6b787700
Fixed
d25e8a774a30f78017acdc366a79460cebbb552f
Introduced
32805f3d1a9f3a59f67ab71ef3a05b6760783162
Fixed
3bb46a2accb9d3c8557b64f0ec6e088d94f9dd70
Database specific 
{
    "cpe": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "12.0.13"
        },
        {
            "introduced": "13.0.0"
        },
        {
            "fixed": "13.0.8"
        },
        {
            "introduced": "14.0.0"
        },
        {
            "fixed": "14.0.4"
        },
        {
            "introduced": "14.0.5"
        },
        {
            "fixed": "15.0.0"
        }
    ]
}

Affected versions

12.*
12.0.12RC1
13.*
13.0.7RC1
14.*
14.0.2RC1
theming-1.*
theming-1.4.5
v1.*
v1.0.0beta1
v11.*
v11.0.0
v11.0RC2
v12.*
v12.0.0
v12.0.0RC1
v12.0.0RC2
v12.0.0RC3
v12.0.0beta1
v12.0.0beta2
v12.0.0beta3
v12.0.0beta4
v12.0.1
v12.0.10
v12.0.10RC1
v12.0.11
v12.0.11RC1
v12.0.12
v12.0.12RC1
v12.0.12RC2
v12.0.13RC1
v12.0.13RC2
v12.0.1RC1
v12.0.1RC2
v12.0.1RC3
v12.0.1RC4
v12.0.1RC5
v12.0.3
v12.0.3RC1
v12.0.3RC2
v12.0.4
v12.0.4RC1
v12.0.4RC2
v12.0.4RC3
v12.0.5
v12.0.5RC1
v12.0.5RC2
v12.0.5RC3
v12.0.6
v12.0.6RC1
v12.0.7
v12.0.7RC1
v12.0.8
v12.0.8RC1
v12.0.9
v13.*
v13.0.0
v13.0.0RC1
v13.0.0beta1
v13.0.0beta2
v13.0.0beta3
v13.0.0beta4
v13.0.1
v13.0.1RC1
v13.0.2
v13.0.2RC1
v13.0.3
v13.0.3RC1
v13.0.3RC2
v13.0.4
v13.0.5
v13.0.5RC1
v13.0.5RC2
v13.0.6
v13.0.6RC1
v13.0.7
v13.0.7RC1
v13.0.7RC2
v13.0.8RC1
v13.0.8RC2
v14.*
v14.0.0
v14.0.0RC1
v14.0.0RC2
v14.0.0beta1
v14.0.0beta2
v14.0.0beta3
v14.0.0beta4
v14.0.1
v14.0.1RC1
v14.0.2
v14.0.2RC1
v14.0.2RC2
v14.0.3
v14.0.4RC1
v14.0.4RC2
v15.*
v15.0.0RC1
v15.0.0RC2
v15.0.0RC3
v15.0.0beta1
v15.0.0beta2
v3.*
v3.0
v4.*
v4.0.0
v4.0.0RC
v4.0.0RC2
v4.0.0beta
v4.0.1
v4.0.4
v4.0.5
v4.0.6
v4.5.0
v4.5.0RC1
v4.5.0RC2
v4.5.0RC3
v4.5.0beta3
v4.5.0beta4
v5.*
v5.0.0
v5.0.0RC1
v5.0.0RC2
v5.0.0RC3
v5.0.0alpha1
v5.0.0beta1
v5.0.0beta2
v6.*
v6.0.0RC1
v6.0.0RC2
v6.0.0alpha2
v6.0.0beta2
v6.0.0beta3
v6.0.0beta4
v6.0.0beta5
v7.*
v7.0.0alpha2
v7.0.0beta1
v8.*
v8.0.0
v8.0.0RC1
v8.0.0RC2
v8.0.0alpha1
v8.0.0alpha2
v8.0.0beta1
v8.0.0beta2
v8.1.0alpha1
v8.1.0alpha2
v8.1.0beta1
v8.1.0beta2
v8.1RC2
v8.2RC1
v8.2beta1
v9.*
v9.0.0beta2
v9.0beta1
v9.1.0beta1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8122.json"