CVE-2020-8138

A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability when subscribing to a malicious calendar URL.

• CWE-918
• CWE-918

• https://hackerone.com/reports/736867Exploit, Third Party Advisory
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-014Third Party Advisory
• https://hackerone.com/reports/736867Exploit, Third Party Advisory
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-014Third Party Advisory

Published

Mar 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8132Lack of input validation in pdf-image npm package version <=…9.8
• CVE-2020-8133A wrong generation of the passphrase for the encrypted block…5.3
• CVE-2020-8134Server-side request forgery (SSRF) vulnerability in Ghost CM…8.1
• CVE-2020-8135The uppy npm package < 1.9.3 is vulnerable to a Server-Side …9.8
• CVE-2020-8136Prototype pollution vulnerability in fastify-multipart < 1.0…7.5
• CVE-2020-8137Code injection vulnerability in blamer 1.0.0 and earlier may…9.8
• CVE-2020-8139A missing access control check in Nextcloud Server < 18.0.1,…6.5
• CVE-2020-8140A code injection in Nextcloud Desktop Client 2.6.2 for macOS…6.7
• CVE-2020-8141The dot package v1.1.2 uses Function() to compile templates.…8.8
• CVE-2020-8142A security restriction bypass vulnerability has been discove…6.8
• CVE-2020-8143An Open Redirect vulnerability was discovered in Revive Adse…6.1
• CVE-2020-8144The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 …8.4