Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.
References
Link | Resource |
---|---|
https://hackerone.com/reports/592864 | Permissions Required |
https://nextcloud.com/security/advisory/?id=NC-SA-2020-005 | Vendor Advisory |
Configurations
Information
Published : 2020-02-04 12:15
Updated : 2020-02-11 10:43
NVD link : CVE-2019-15616
Mitre link : CVE-2019-15616
JSON object : View
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Products Affected
nextcloud
- nextcloud_server