Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-15619

No fix known EPSS <1%

Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.

Published 2020-02-04 · CVE record · OSV

Products: nextcloud deck, nextcloud_server, nextcloud talk