description: Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
problem types: Improper Certificate Validation (CWE-295)
affected:
{
product: Nextcloud Social
vendor: n/a
versions:
status: affected, version: Affects <0.4.0
status: affected, version: Fixed in 0.4.0
}