CVE-2019-5449 - AskarLabs CVE Database

CVE-2019-5449

Vendor N/A

Product Nextcloud Server

Weakness CWE-287 · Improper authentication

Published July 30, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events.

Key dates

02Disclosure timeline

July 30, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-5449 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html