Unrated

A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) atta...

CVE-2020-8281 First seen on SecPulse Jan 7, 2021

Original description The description as published by the source.

A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory nextcloud.com
report hackerone.com

Key facts

Severity: Unrated
Published: Jan 7, 2021
First seen on SecPulse: Jan 7, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54