CVE-2019-5452

Published: Jul 30, 2019Modified: Jun 17, 2026

2.4

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 0.9 / Impact: 1.4

Source: NVD

Description

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.

Affected (1)

Products: Nextcloud: Nextcloud

Nextcloud

1 product

Nextcloud

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nextcloud Nextcloud	Before 3.6.2

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://hackerone.com/reports/534541

Source: support@hackerone.com

ExploitThird Party Advisory

https://hackerone.com/reports/534541

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.