MEDIUM
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF
Published May 12, 2020
5.4
MEDIUMCVSS 3.1
EPSS 1.14%
Description
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.
Affected products
- Vendor n/a Product Nextcloud Server Defaultn/a
- Version 18.0.3StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Nextcloud Server | n/a |
|
- < 18.0.3
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (7)
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00037.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00038.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00040.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00019.html vendor-advisoryx_refsource_SUSE
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29048 Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/ vendor-advisoryx_refsource_FEDORA
- https://nextcloud.com/security/advisory/?id=NC-SA-2020-019 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00037.html | vendor-advisoryx_refsource_SUSE | |
| http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00038.html | vendor-advisoryx_refsource_SUSE | |
| http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00040.html | vendor-advisoryx_refsource_SUSE | |
| http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00019.html | vendor-advisoryx_refsource_SUSE | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29048 | Advisory | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/ | vendor-advisoryx_refsource_FEDORA | |
| https://nextcloud.com/security/advisory/?id=NC-SA-2020-019 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner hackerone
Published May 12, 2020
Updated Aug 4, 2024
Reserved Jan 28, 2020
Link CVE-2020-8155
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-29048 Assigner hackerone
Published May 12, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-29048