CVE-2020-8133: Nextcloud Server

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.

Affected products

• Nextcloud Nextcloud Server: version 19.0.1 only

Published 2020-11-09. Last modified 2026-06-17.