Nextcloud Social vulnerabilities

• nextcloud social Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user. CVE-2020-8278 5.3 MediumNovember 19, 2020
• nextcloud social Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0... CVE-2020-8279 7.4 HighNovember 19, 2020