CVE-2020-8227

Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.

Date published : 2020-08-21

https://security.gentoo.org/glsa/202009-09

https://hackerone.com/reports/590319