Lucene search

K
nextcloudJulien ThomasNC-SA-2019-011
HistoryJul 26, 2019 - 12:00 a.m.

Query restriction bypass on exposed FileContentProvider in Android app (NC-SA-2019-011)

2019-07-2600:00:00
Julien Thomas
nextcloud.com
10

0.001 Low

EPSS

Percentile

34.3%

Not strictly enough sanitization allowed an attacker to get content information from protected tables when using custom queries.

CPENameOperatorVersion
nextcloud androidlt3.6.1

0.001 Low

EPSS

Percentile

34.3%

Related for NC-SA-2019-011