CVE-2019-15623

MEDIO 5.3CVE-2019-15623 · Published 04/02/2020 · updated 17/06/2026

In breve

CVE-2019-15623 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda nextcloud server (nextcloud), backports sle (opensuse).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.9% delle vulnerabilità.
Correzione: aggiornare a 15.0.9, 16.0.2, 14.0.13 o successiva.

Package	Affected versions	Patched versions
nextcloud server nextcloud	`≥ 15.0.0, < 15.0.9≥ 16.0.0, < 16.0.2< 14.0.13`	`15.0.916.0.214.0.13`
backports sle opensuse	`= 15.0`	No fix yet

Description

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.

References

lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html · Third Party Advisory
hackerone.com/reports/508490 · Exploit
nextcloud.com/security/advisory · Third Party Advisory

Altre vulnerabilità di nextcloud server

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nextcloud server

nextcloud

≥ 15.0.0, < 15.0.9≥ 16.0.0, < 16.0.2< 14.0.13

15.0.916.0.214.0.13

backports sle

opensuse

= 15.0

No fix yet

Altre vulnerabilità di nextcloud server

Vedi tutto →