CVE-2020-8180 - AskarLabs CVE Database

CVE-2020-8180

Vendor N/A

Product Nextcloud Talk

Weakness CWE-94 · Code injection

Published June 8, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.

Key dates

02Disclosure timeline

June 8, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8180 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2021-38117 Possible Remote Code Execution Vulnerability OpenText iManager CVE-2025-8878 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.4 - Unauthenticated Arbitrary Shortcode Execution CVE-2026-3960 Remote Code Execution in h2oai/h2o-3 CVE-2026-5970 FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection CVE-2025-30067 Apache Kylin: The remote code execution via jdbc url