CVE-2020-8138CWE-918

A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability…

published March 20, 2020

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability when subscribing to a malicious calendar URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01395 · 72.2th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2020-03-20T20:12Z
EPSS history
Timeline
  • 20 MAR 20:12Z
    A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability…
    cvelistv5