CVE-2020-8119
Fixed in a distro release EPSS <1%
Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app.
Products: nextcloud_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 12 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.6.1 |
| openSUSE Leap 15.1 | nextcloud | 15.0.14-bp151.3.3.1 |