OPENSUSE-SU-2020:0220-1: nextcloud&distro=openSUSE Leap 15.1

CVSS: UnknownPublished
Published 15-02-2020Last modified 04-02-2026
Open JSON

Vulnerability summary

OPENSUSE-SU-2020:0220-1 is a vulnerability in nextcloud&distro=openSUSE Leap 15.1 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0 · Related 6
CVE-2019-15613CVE-2019-15621CVE-2019-15623CVE-2019-15624CVE-2020-8118CVE-2020-8119

Timeline

  1. 15-02-2020
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for nextcloud This update for nextcloud fixes the following issues: Nextcloud was updated to 15.0.14: - NC-SA-2020-002, CVE-2019-15613: workflow rules to depend their behaviour on the file extension when checking file mimetypes (boo#1162766) - NC-SA-2019-016, CVE-2019-15623: Exposure of Private Information caused the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled (boo#1162775) - NC-SA-2019-015, CVE-2019-15624: Improper Input Validation allowed group admins to create users with IDs of system folders (boo#1162776) - NC-SA-2019-012, CVE-2020-8119: Improper authorization caused leaking of previews and files when a file-drop share link is opened via the gallery app (boo#1162781) - NC-SA-2019-014, CVE-2020-8118: An authenticated server-side request forgery allowed to detect local and remote services when adding a new subscription in the calendar application (boo#1162782) - NC-SA-2020-012, CVE-2019-15621: Improper permissions preservation causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link (boo#1162784) - To many changes. For detail see: https://nextcloud.com/changelog/ nextcloud was updated to 13.0.12: - Fix NC-SA-2020-001 - To many changes. For detail see: https://nextcloud.com/changelog/

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse3 products
  • nextcloud&distro=SUSE Package Hub 12< 15.0.14-bp151.3.3.1
  • nextcloud&distro=SUSE Package Hub 15< 15.0.14-bp151.3.3.1
  • nextcloud&distro=SUSE Package Hub 15 SP1< 15.0.14-bp151.3.3.1
Opensuse1 product
  • nextcloud&distro=openSUSE Leap 15.1< 15.0.14-bp151.3.3.1

2 vendors · 4 products

References

13 links
Show all 13 references