Description (CNA)
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Nextcloud Contact | affected 3.3.0 |
CWE
CWE-840
References
ADP enrichment
No English description supplied.