← All advisories

High severity7.5NVD Advisory· Published Jan 26, 2021· Updated Jun 17, 2026

CVE-2020-8295

CVE-2020-8295

Description

A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

Nextcloud/Nextcloud Enterprise Serverllm-fuzzy
Range: <=19
Nextcloud/Nextcloudv5
Range: Fixed in 20.0.0
Nextcloud/Server
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
Range: <20.0.0
osv-coords6 versions
pkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.2 pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP3 pkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2012 pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP1 pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP2
< 20.0.7-lp152.3.6.1+ 5 more
- (no CPE)range: < 20.0.7-lp152.3.6.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1
- (no CPE)range: < 20.0.11-bp153.2.3.1

Patches

Vulnerability mechanics

References

2

hackerone.com/reports/812754nvdExploitThird Party Advisory
nextcloud.com/security/advisory/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.