CVE-2020-8278: Nextcloud Social

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.

Affected products

• Nextcloud Social: version 0.3.1 only

Published 2020-11-19. Last modified 2026-06-17.