Nextcloud Social vulnerabilities

2 vulnerabilities

Known vulnerabilities in Nextcloud Social, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2020-8278nextcloudsocial
EPSS score
1.02%
Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.7.4CVE-2020-8279nextcloudsocial
EPSS score
0.65%
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.