Unrated
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
CVE-2020-8224
First seen on SecPulse
References
- advisory nextcloud.com
- advisory security.gentoo.org
- report hackerone.com