CVE-2019-5452

2.4 lowEPSS 0.4%

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.

Severity

CVSS 3.1

2.4 low

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2019-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nextcloud:nextcloud

References

https://hackerone.com/reports/534541
https://hackerone.com/reports/534541

Check your stack JSON