A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
Advisories
Source ID Title
EUVD EUVD EUVD-2020-29067 A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published:

Updated: 2024-08-04T09:56:28.242Z

Reserved: 2020-01-28T00:00:00

Link: CVE-2020-8189

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-08-21T21:15:11.887

Modified: 2024-11-21T05:38:28.087

Link: CVE-2020-8189

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.