Description
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Desktop Client | Fixed in 2.6.5 | — |
Unscored
CVE-2020-8224
EUVD-2020-29097GHSA-79jq-9hhm-7rfm
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed dire…
Published Aug 10, 2020 · Updated Aug 4, 2024 · Assigned by hackerone