CVE-2020-8155
Fixed in a distro release EPSS 1%
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.
Products: nextcloud_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 12 | nextcloud | 20.0.0-bp152.2.3.1 |
| SUSE Package Hub 12 | nextcloud | 18.0.4-22.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 20.0.0-bp152.2.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 18.0.4-bp151.3.9.1 |
| SUSE Package Hub 15 SP2 | nextcloud | 20.0.0-bp152.2.3.1 |
| openSUSE Leap 15.1 | nextcloud | 18.0.4-lp151.2.6.1 |
| openSUSE Leap 15.1 | nextcloud | 20.0.0-bp152.2.3.1 |
| openSUSE Leap 15.2 | nextcloud | 20.0.0-bp152.2.3.1 |