CVE-2019-5452

EPSS 0.4%CWE-284

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

30 Jul 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.

Affected products

n/a · com.nextcloud.client

References

https://hackerone.com/reports/534541