Description
Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Social | Affects v0.3.1, Fixed in v0.4.0 | — |
Unscored
CVE-2020-8278
EUVD-2020-29146GHSA-hcc7-mq5f-p6fm
Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.
Published Nov 19, 2020 · Updated Aug 4, 2024 · Assigned by hackerone