VULNERABILITY INTELLIGENCE
CVE-2019-5452
CVSS score2.4 LOW
EPSS probability0.43%
CISA KEVNot currently listed
Published2019-07-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- support@hackerone.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory