Not rated
CVE-2019-5450 Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style…
Description
Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.nextcloud.client | 3.7.0 | No fix stated |
Other CVEs of com.nextcloud.client
The 4 CVEs of com.nextcloud.client →
CVE-2019-5451
Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly…
Not rated
CVE-2019-5452
Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when…
Not rated
CVE-2019-5454
SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query…
Not rated