CVE-2019-5476

CRITICO 9.8CVE-2019-5476 · Published 07/08/2019 · updated 17/06/2026

In breve

CVE-2019-5476 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda lookup-server (nextcloud).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.4% delle vulnerabilità.
Correzione: aggiornare a 0.3.0 o successiva.

Package	Affected versions	Patched versions
lookup-server nextcloud	`< 0.3.0`	`0.3.0`

Description

An SQL Injection in the Nextcloud Lookup-Server < v0.3.0 (running on https://lookup.nextcloud.com) caused unauthenticated users to be able to execute arbitrary SQL commands.

References

hackerone.com/reports/508487 · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free