CVE-2019-15624
Fixed in a distro release EPSS 1%
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.
Products: nextcloud_server, opensuse backports, suse_linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 12 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.3.1 |
| SUSE Package Hub 15 SP1 | nextcloud | 15.0.14-bp151.3.6.1 |
| openSUSE Leap 15.1 | nextcloud | 15.0.14-bp151.3.3.1 |