What the vulnerability does
01Description
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
CVSS base score
—
Key dates
02Disclosure timeline
November 19, 2020
CVE published
August 4, 2024
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2026-24933 An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
CVE-2026-3336 PKCS7_verify Certificate Chain Validation Bypass in AWS-LC
CVE-2022-45458
CVE-2023-50315 IBM WebSphere Application Server information disclosure
CVE-2026-32144 OCSP designated-responder authorization bypass via missing signature verification
