CVE-2019-15622

2020-02-0419:08:57

CWE-89

hackerone

www.cve.org

AI Score

3.5

Confidence

High

EPSS

0.001

Percentile

34.1%

JSON

Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries.

CNA Affected

[
  {
    "product": "Nextcloud Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "3.6.0"
      }
    ]
  }
]