CVE-2019-15611

4.9

MEDIUMCVSS v3

Published

February 4, 2020

CVSS v2

4 MEDIUM

Affected

3 projects

Assigned by

[email protected]

Severity scale

010

Description

Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notifications.

nextcloud

Docker HubNextcloud manual docker image

< 2.24.0NVD

nextcloud

NPMAttempt to port nextcloud to nodejs

< 2.24.0NVD

nextcloud

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Nextcloud OCS and WebDAV API endpoints wrapper in Ruby for user provisioning, file and directory management, sharing (including Federated Cloud Sharing), group and application operations.

< 2.24.0NVD

Security Advisories

CVE-2019-15611

Description

More on this CVE