CVE-2019-5450: XSS
Published Jul 30, 2019
·Updated
Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.
Affected Software
1 affected component
Nextcloud Nextcloud android<3.7.0
Event History
Jul 30, 2019
CVE Published
via MITRE·08:35 PM
Data Sourced
via MITRE·08:35 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-5450.
2
What is the affected software?
The affected software is the Nextcloud Android app prior to version 3.7.0.
3
What is the severity of CVE-2019-5450?
The severity of CVE-2019-5450 is medium.
4
How can I exploit this vulnerability?
This vulnerability allows the styling of directory names in the header bar when using basic HTML.
5
How do I fix CVE-2019-5450?
To fix CVE-2019-5450, update the Nextcloud Android app to version 3.7.0 or later.