PT-2020-20035

CVE-2020-8223

·

Published

2020-10-05

·

Updated

2022-01-01

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Nextcloud Server version 19.0.0
Description A logic error in the software caused a privilege escalation, allowing malicious users to reshare with higher permissions than they were assigned.
Recommendations For Nextcloud Server version 19.0.0, update to a version that fixes this issue to prevent malicious users from escalating their privileges.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-269: Improper Privilege Management
Related identifiers
CVE-2020-8223
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com