CVE-2020-8295

A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.

Date published : 2021-01-26

https://hackerone.com/reports/812754

https://nextcloud.com/security/advisory/?id=NC-SA-2021-003