CVE-2020-8133 Information

Description

A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.

Reference

https://hackerone.com/reports/661051 https://nextcloud.com/security/advisory/?id=NC-SA-2020-038