CVE-2020-8120

A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation.

• CWE-79
• CWE-79

• https://hackerone.com/reports/605915Exploit, Third Party Advisory
• https://nextcloud.com/security/advisory/?id=NC-SA-2019-004Broken Link, Vendor Advisory
• https://hackerone.com/reports/605915Exploit, Third Party Advisory
• https://nextcloud.com/security/advisory/?id=NC-SA-2019-004Broken Link, Vendor Advisory

Published

Feb 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8114GitLab EE 8.9 and later through 12.7.2 has Insecure Permissi…9.8
• CVE-2020-8115A reflected XSS vulnerability has been discovered in the pub…6.1
• CVE-2020-8116Prototype pollution vulnerability in dot-prop npm package ve…7.3
• CVE-2020-8117Improper preservation of permissions in Nextcloud Server 14.…4.3
• CVE-2020-8118An authenticated server-side request forgery in Nextcloud se…5
• CVE-2020-8119Improper authorization in Nextcloud server 17.0.0 causes lea…4.3
• CVE-2020-8121A bug in Nextcloud Server 14.0.4 could expose more data in r…8.1
• CVE-2020-8122A missing check in Nextcloud Server 14.0.3 could give recipi…4.3
• CVE-2020-8123A denial of service exists in strapi v3.0.0-beta.18.3 and ea…4.9
• CVE-2020-8124Insufficient validation and sanitization of user input exist…5.3
• CVE-2020-8125Flaw in input validation in npm package klona version 1.1.0 …9.8
• CVE-2020-8126A privilege escalation in the EdgeSwitch prior to version 1.…7.8