← All advisories

Unrated severityNVD Advisory· Published Feb 4, 2020· Updated Aug 5, 2024

CVE-2019-15624

CVE-2019-15624

Description

Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Nextcloud/Nextcloud Enterprise Serverllm-fuzzy
Range: = 15.0.7
osv-coords4 versions
pkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2012 pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015 pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP1
< 15.0.14-bp151.3.3.1+ 3 more
- (no CPE)range: < 15.0.14-bp151.3.3.1
- (no CPE)range: < 15.0.14-bp151.3.3.1
- (no CPE)range: < 15.0.14-bp151.3.3.1
- (no CPE)range: < 15.0.14-bp151.3.3.1
Nextcloud/Nextcloudv5
Range: 15.0.7

Patches

Vulnerability mechanics

References

4

lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.htmlmitrevendor-advisoryx_refsource_SUSE
lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.htmlmitrevendor-advisoryx_refsource_SUSE
hackerone.com/reports/508493mitrex_refsource_MISC
nextcloud.com/security/advisory/mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.