CVE-2020-8119: 
Linux openSUSE vulnerability analysis and mitigation

Improper authorization vulnerability (CVE-2020-8119) was discovered in Nextcloud server 17.0.0, which causes leaking of previews and files when a file-drop share link is opened via the gallery app. The vulnerability was identified and disclosed in early 2020 (CVE List, Debian Tracker).

The vulnerability is identified as NC-SA-2019-012 in Nextcloud's security advisory system and stems from an improper authorization implementation in the gallery app when handling file-drop share links. This security flaw specifically affects Nextcloud server version 17.0.0 (OpenSUSE Security).

When exploited, this vulnerability results in unauthorized access to file previews and actual files through the gallery app when accessing a file-drop share link, potentially exposing sensitive information to unauthorized users (OpenSUSE Security).

The vulnerability has been addressed in subsequent updates. OpenSUSE released security updates (openSUSE-SU-2020:0220-1 and openSUSE-SU-2020:0229-1) to fix this issue along with other security vulnerabilities. Users are advised to update their Nextcloud installations to the patched versions (OpenSUSE Security, OpenSUSE Update).