CVE-2019-15613

Quick assessment

Copy summary Copy citation

Affected

n/a Nextcloud Server

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Nextcloud是德国Nextcloud公司的一套开源的自托管文件同步和共享的通信应用平台。 Nextcloud Server 17.0.1版本中存在数据伪造问题漏洞，该漏洞源于程序仅检查文件扩展名而未检查MIME类型。远程攻击者可利用该漏洞上传恶意文件。

CVE-2019-15613 affects n/a Nextcloud Server. No confirmed in-the-wild exploitation; assess based on exposure. Nextcloud是德国Nextcloud公司的一套开源的自托管文件同步和共享的通信应用平台。 Nextcloud Server 17.0.1版本中存在数据伪造问题漏洞，该漏洞源于程序仅检查文件扩展名而未检查MIME类型。远程攻击者可利用该漏洞上传恶意文件。 CVE-2019-15613 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2019-15613

I. Basic Information for CVE-2019-15613

Affected Products

II. Public POCs for CVE-2019-15613

III. Intelligence Information for CVE-2019-15613

Mailing List Discussions for CVE-2019-15613 (2)

• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html vendor-advisory x_refsource_SUSE

Other References for CVE-2019-15613 (2)

• https://hackerone.com/reports/697959 x_refsource_MISC
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-002 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2019-15613

Same Patch Batch · n/a · 2020-02-04 · 55 CVEs total

Showing top 20 of 55 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2019-15613