CVE-2020-8223 - AskarLabs CVE Database

CVE-2020-8223

Vendor N/A

Product Nextcloud Server

Weakness CWE-269

Published October 5, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves.

Key dates

02Disclosure timeline

October 5, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8223 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/269.html