Medium severity5.3OSV Advisory· Published Oct 5, 2020· Updated Jun 17, 2026
CVE-2020-8228
CVE-2020-8228
Description
A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
121.4.0, 1.6.0, 1.7.0, …+ 2 more
- (no CPE)range: 1.4.0, 1.6.0, 1.7.0, …
- cpe:2.3:a:nextcloud:preferred_providers:1.7.0:*:*:*:*:*:*:*
- (no CPE)range: <1.7.0
cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
- osv-coords5 versionspkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP2
< 20.0.0-bp152.2.3.1+ 4 more
- (no CPE)range: < 20.0.0-bp152.2.3.1
- (no CPE)range: < 20.0.0-bp152.2.3.1
- (no CPE)range: < 20.0.0-bp152.2.3.1
- (no CPE)range: < 20.0.0-bp152.2.3.1
- (no CPE)range: < 20.0.0-bp152.2.3.1
Patches
Vulnerability mechanics
References
3- hackerone.com/reports/922470nvdExploitThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-10/msg00019.htmlnvdThird Party Advisory
- nextcloud.com/security/advisory/nvdVendor Advisory
News mentions
0No linked articles in our index yet.