VULNERABILITY INTELLIGENCE

CVE-2019-15618

CVSS score4.8 MEDIUM

EPSS probability0.73%

CISA KEVNot currently listed

Published2020-02-04

Last modified2026-06-17

Description

Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.