CVE-2019-15622
CVE-2019-15622
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Feb 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries.
Affected products
n/a · Nextcloud Android