CVE-2019-5450

6.8 mediumEPSS 0.5%

Medium (6.8) in nextcloud nextcloud. EPSS 0.5% chance of exploitation in the next 30 days.

Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-80
Published: 2019-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nextcloud:nextcloud

References

https://hackerone.com/reports/631227
https://hackerone.com/reports/631227

Check your stack JSON