Servers and applications
CVE-2019-15619
Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.
- Severity
- Medium 4.8
- Published
- 4 Feb 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 16.0.4
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server |
|