CVE-2019-15619: XSS
Published Feb 4, 2020
·Updated
Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.
Affected Software
3 affected components
Nextcloud Deck<0.6.6
Nextcloud Server<16.0.4
Nextcloud Talk<6.0.4
Event History
Feb 4, 2020
CVE Published
via MITRE·07:08 PM
Data Sourced
via MITRE·07:08 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-15619.
2
What is the severity of CVE-2019-15619?
The severity of CVE-2019-15619 is medium.
3
Which versions of Nextcloud Deck are affected by CVE-2019-15619?
Nextcloud Deck versions up to and excluding 0.6.6 are affected by CVE-2019-15619.
4
Which versions of Nextcloud Server are affected by CVE-2019-15619?
Nextcloud Server versions up to and excluding 16.0.4 are affected by CVE-2019-15619.
5
Which versions of Nextcloud Talk are affected by CVE-2019-15619?
Nextcloud Talk versions up to and excluding 6.0.4 are affected by CVE-2019-15619.