Servers and applications
CVE-2019-15617
A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.
- Severity
- Medium 5.4
- Published
- 4 Feb 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 17.0.1
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server |
|