CVE-2019-5449CWE-287

A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events

published July 30, 2019

CVSS
—
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00854 · 57.9th percentile
Weakness
CWE-287 · Improper Authentication
Published
2019-07-30T20:36Z
EPSS history
Timeline
  • 30 JUL 20:36Z
    A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events
    cvelistv5