Lucene search
MitreCVELIST:CVE-2019-12739HistoryJun 05, 2019 - 1:57 p.m.
CVE-2019-12739
2019-06-0513:57:32
mitre
www.cve.org
2
CVSS3
9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.011
Percentile
84.4%
lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution via shell metacharacters in a RAR filename via ajax/extractRar.php (nameOfFile and directory parameters).
Related
cve
cve
CVE-2019-12739
2019-06-05 14:29:11
CVE-2019-5441
2019-06-07 20:29:01
prion
prion
Remote code execution
2019-06-05 14:29:00
nvd
nvd
CVE-2019-12739
2019-06-05 14:29:11
CVE-2019-5441
2019-06-07 20:29:01
CVSS3
9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.011
Percentile
84.4%
Related for CVELIST:CVE-2019-12739