NetSight
critical9.8

CVE-2019-5454

SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiring to resetup the acc…

Impact

SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiring to resetup the account.

Affected products

VendorProductAffected versions
NextcloudNextcloud
Versions 1.0.0, 1.0.1, 1.1.0, 1.2.0, 1.3.0, 1.3.1

Weakness classification

References