ALT-PU-2019-1778-1
Closed vulnerabilities
Published: 2020-02-04
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2019-15618
Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.
Severity: MEDIUM (4.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
References:
Published: 2020-02-04
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2019-15624
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.
Severity: MEDIUM (4.9)
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
References:
Closed bugs
Лишняя зависимость на php7-devel