VDB
CVE-2019-15623
CVE-2019-15623
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.
EPSS 1.92% · 79.7th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
1.92%
79.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Nextcloud Server | 16.0.1 |
| nextcloud | nextcloud_server | 15.0.0, 16.0.0, 0 |
| opensuse | backports_sle | 15.0 |
| suse | package_hub |
Timeline
- CVE Published
- Nov 26, 2019 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Sep 9, 2022 EPSS Score