Extract

extract

Vendor: Nextcloud • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2019-12739

1Nextcloud

1Extract

Jun 17, 2026

Jun 5, 2019

N/A· v4

8.8 HIGH· v3

6.5 MEDIUM· v2

lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution via shell metacharacters in a RAR filename via ajax/extractRar.php (nameOfFile and directory parameter...Show more