High severity7.5NVD Advisory· Published Nov 2, 2020· Updated Jun 17, 2026
CVE-2020-8183
CVE-2020-8183
Description
A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- Range: = 19.0.0
- osv-coords5 versionspkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP2
< 20.0.0-bp152.2.3.1+ 4 more
- (no CPE)range: < 20.0.0-bp152.2.3.1
- (no CPE)range: < 20.0.0-bp152.2.3.1
- (no CPE)range: < 20.0.0-bp152.2.3.1
- (no CPE)range: < 20.0.0-bp152.2.3.1
- (no CPE)range: < 20.0.0-bp152.2.3.1
Patches
Vulnerability mechanics
References
2- hackerone.com/reports/885041nvdExploitThird Party Advisory
- nextcloud.com/security/advisory/nvdBroken LinkVendor Advisory
News mentions
0No linked articles in our index yet.