CVE-2020-8183: Nextcloud Server

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.

Affected products

• Nextcloud Nextcloud Server: before 18.0.6 (fixed in 18.0.6); from 19.0.0, before 19.0.1 (fixed in 19.0.1)

Published 2020-11-02. Last modified 2026-06-17.