Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2019-15623

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.

  • Published: Feb 4, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-15623
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
nextcloud / nextcloud_server 16.0.0 16.0.2
nextcloud / nextcloud_server 15.0.0 15.0.9
nextcloud / nextcloud_server - 14.0.13
opensuse / backports_sle 15.0-sp1 15.0-sp1.x