VULNERABILITY INTELLIGENCE

CVE-2019-15619

CVSS score4.8 MEDIUM
EPSS probability0.84%
CISA KEVNot currently listed
Published2020-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.

Weakness classification

  • support@hackerone.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references