medium4.9
CVE-2019-15624
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.
Impact
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Nextcloud Server | before 14.0.11 from 15.0.0 before 15.0.8 |
| Opensuse | Backports | Version sle-15 |
| Suse | Suse Linux Enterprise Server | Version 12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html
- https://hackerone.com/reports/508493
- https://nextcloud.com/security/advisory/?id=NC-SA-2019-015
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html
- https://hackerone.com/reports/508493
- https://nextcloud.com/security/advisory/?id=NC-SA-2019-015