VULNERABILITY INTELLIGENCE

CVE-2020-8139

CVSS score6.5 MEDIUM

EPSS probability1.54%

CISA KEVNot currently listed

Published2020-03-20

Last modified2026-06-17

Description

A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL.