Description
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Server | Fixed in 20.0.0 | — |
Unscored
CVE-2020-8296
EUVD-2020-29164GHSA-6m9p-3vwc-4p47
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.
Published Mar 3, 2021 · Updated Aug 4, 2024 · Assigned by hackerone