CVE-2019-15622

2.4 lowEPSS 0.5%

Low (2.4) in nextcloud nextcloud. EPSS 0.5% chance of exploitation in the next 30 days.

Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries.

Severity

CVSS 3.1

2.4 low

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nextcloud:nextcloud

References

https://hackerone.com/reports/518669
https://nextcloud.com/security/advisory/?id=NC-SA-2019-011
https://hackerone.com/reports/518669
https://nextcloud.com/security/advisory/?id=NC-SA-2019-011

Check your stack JSON