VULNERABILITY INTELLIGENCE

CVE-2020-8181

CVSS score4.3 MEDIUM

EPSS probability0.79%

CISA KEVNot currently listed

Published2020-07-10

Last modified2026-06-17

Description

A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.