Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-15618

No fix known EPSS <1%

Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.

Published 2020-02-04 · CVE record · OSV

Products: nextcloud_server