CVE-2019-15616
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)
Published: Feb 4, 2020 / Updated: 58mo ago
010
CVSS 4.3EPSS 0.05%Medium
CVE info copied to clipboard
Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Timeline
First Article
Feedly found the first article mentioning CVE-2019-15616. See article
Feb 4, 2020 at 9:41 PM / twitter.com
EPSS
EPSS Score was set to: 0.05% (Percentile: 20.7%)
Oct 7, 2023 at 10:07 AM
Affected Systems
Nextcloud/nextcloud_server
+null more
Patches
nextcloud.com
+null more
Links to Mitre Att&cks
T1562.003: Impair Command History Logging
+null more
Attack Patterns
CAPEC-10: Buffer Overflow via Environment Variables
+null more