From 228b9aed51572f1581fe4574e8aa4b9af85a2691 Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Sat, 19 Sep 2020 10:20:20 +0200 Subject: Add CVE-2020-8225/nextcloud-desktop --- data/CVE/list | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/data/CVE/list b/data/CVE/list index 96d1ef5d1f..a1a441b49f 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -41276,7 +41276,9 @@ CVE-2020-8227 (Missing sanitization of a server response in Nextcloud Desktop Cl CVE-2020-8226 (A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allow ...) NOT-FOR-US: phpBB CVE-2020-8225 (A cleartext storage of sensitive information in Nextcloud Desktop Clie ...) - TODO: check + - nextcloud-desktop 3.0.1-1 + [buster] - nextcloud-desktop (Minor issue) + NOTE: https://nextcloud.com/security/advisory/?id=NC-SA-2020-031 CVE-2020-8224 (A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arb ...) - nextcloud-desktop (Windows-specific) NOTE: https://nextcloud.com/security/advisory/?id=NC-SA-2020-030 -- cgit v1.2.3