CVE-2020-8140CWE-94

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the…

published March 20, 2020

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00689 · 52.2th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2020-03-20T20:20Z
EPSS history
Timeline
  • 20 MAR 20:20Z
    A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the…
    cvelistv5