openSUSE-SU-2020:0670-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2020:0670-1

Related

Published

2020-05-22T16:15:04Z

Modified

2025-05-07T18:12:17.225652Z

Upstream

Summary

Security update for nextcloud

Details

This update for nextcloud to 18.0.4 fixes the following issues:

Security issues fixed:

CVE-2020-8154: Fixed an XSS vulnerability when opening malicious PDFs (NC-SA-2020-018 boo#1171579).
CVE-2020-8155: Fixed a direct object reference vulnerability that allowed attackers to remotely wipe devices of other users (NC-SA-2020-019 boo#1171572).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

18.0.4-lp151.2.6.1

{
    "binaries": [
        {
            "nextcloud": "18.0.4-lp151.2.6.1"
        }
    ]
}