Description (CNA)
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Nextcloud Social | affected Affects <0.4.0; affected Fixed in 0.4.0 |
CWE
CWE-295
References
ADP enrichment
No English description supplied.