CVE-2019-5453

6.1 mediumEPSS 0.5%

Medium (6.1) in nextcloud nextcloud. EPSS 0.5% chance of exploitation in the next 30 days.

Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-288
Published: 2019-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nextcloud:nextcloud

References

https://hackerone.com/reports/331489
https://hackerone.com/reports/331489

Check your stack JSON