UpHeron
All vulnerabilities

Servers and applications

CVE-2019-15623

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.

Severity
Medium 5.3
Published
4 Feb 2020
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
14.0.13, 15.0.9, 16.0.2
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • Every version before 14.0.13
  • From 15.0.0 before 15.0.9
  • From 16.0.0 before 16.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-15623
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-15623