CVE-2020-8228

MEDIUM

Preferred Providers app 1.7.0 - Info Disclosure

Title source: llm

A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.

Core 3

Core References

Exploit, Third Party Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

Third Party Advisory vendor-advisory x_refsource_suse

CVSS v3 5.3

EPSS 0.0045

EPSS Percentile 63.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-840 CWE-307

Status published

Products (4)

nextcloud/preferred_providers 1.7.0

opensuse/backports_sle 15.0 sp1 (2 CPE variants)

opensuse/leap 15.1

opensuse/leap 15.2

Published Oct 05, 2020

Tracked Since Feb 18, 2026