CVE-2020-8118: 
Linux openSUSE vulnerability analysis and mitigation

CVE-2020-8118 is a server-side request forgery (SSRF) vulnerability discovered in Nextcloud server 16.0.1. The vulnerability allowed authenticated users to detect local and remote services when adding a new subscription in the calendar application (OpenSUSE Security, Debian Security).

The vulnerability is identified as an authenticated server-side request forgery (SSRF) that specifically affects the calendar application's subscription functionality in Nextcloud server version 16.0.1. The issue was tracked as NC-SA-2019-014 in Nextcloud's security advisory system (OpenSUSE Security).

When exploited, the vulnerability allows authenticated users to detect both local and remote services through the calendar application's subscription feature. This could potentially lead to unauthorized service discovery within the network infrastructure (Debian Security).

The vulnerability requires authentication to exploit, as it is only accessible to logged-in users when attempting to add a new subscription in the calendar application (OpenSUSE Security).

The vulnerability was addressed in Nextcloud version 15.0.14. Users are advised to upgrade to this version or later to receive the security fix. The update was distributed through various channels including SUSE Package Hub and openSUSE Backports (OpenSUSE Security).