Описание
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.
EPSS
Процентиль: 44%
0.00219
Низкий
CVE ID
Связанные уязвимости
CVSS3: 4.3
nvd
больше 5 лет назад
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.
EPSS
Процентиль: 44%
0.00219
Низкий