← Back

Social

social

Vendor: Nextcloud • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-8279
1Nextcloud
1Social
Jun 17, 2026
Nov 19, 2020
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
CVE-2020-8278
1Nextcloud
1Social
Jun 17, 2026
Nov 19, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.