CVE-2020-8140
CVE-2020-8140
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Mar 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
Affected products
n/a · Desktop Client