1. Home
  2. CVE Database
  3. CVE-2019-5450
MEDIUM · 6.8

CVE-2019-5450

Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.

Vulnerability Description

Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NextcloudNextcloud< 3.7.0

Related Weaknesses (CWE)

CWE-79CWE-80

References

FAQ

What is CVE-2019-5450?

CVE-2019-5450 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.

How severe is CVE-2019-5450?

CVE-2019-5450 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-5450?

Check the references section above for vendor advisories and patch information. Affected products include: Nextcloud Nextcloud.