HackeroneCVELIST:CVE-2019-15624

HistoryFeb 04, 2020 - 7:08 p.m.

CVE-2019-15624

2020-02-0419:08:57

hackerone

www.cve.org

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

JSON

Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.

CNA Affected

[
  {
    "product": "Nextcloud Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "15.0.7"
      }
    ]
  }
]

References

lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html

lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html

hackerone.com/reports/508493

nextcloud.com/security/advisory/?id=NC-SA-2019-015