CVE-2020-8118
Fixed in a distro release EPSS 1%
An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.
Products: nextcloud_server, opensuse backports_sle, novell suse_linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 12 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.6.1 |
| openSUSE Leap 15.1 | nextcloud | 15.0.14-bp151.3.3.1 |