CVE-2019-15613
Fixed in a distro release EPSS 1%
A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking file mimetypes.
Products: nextcloud_server, opensuse backports
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 12 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.6.1 |
| openSUSE Leap 15.1 | nextcloud | 15.0.14-bp151.3.3.1 |