CVE-2020-8228: Nextcloud Preferred Providers

Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days.

A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.

Affected products

• Nextcloud Preferred Providers: version 1.7.0 only
• Opensuse Backports Sle: version 15.0 only
• Opensuse Leap: version 15.1 only; version 15.2 only

Published 2020-10-05. Last modified 2026-06-17.