Description
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Social | Affects <0.4.0, Fixed in 0.4.0 | — |
Unscored
CVE-2020-8279
EUVD-2020-29147GHSA-7f2c-fj5r-9f75
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
Published Nov 19, 2020 · Updated Aug 4, 2024 · Assigned by hackerone