PT-2019-12910

Name of the Vulnerable Software and Affected Versions Nextcloud Extract add-on versions prior to 1.2.0 Description The issue allows for remote code execution via shell metacharacters in a RAR filename. This is achieved through the ajax/extractRar.php endpoint, specifically using the nameOfFile an...