CVE-2019-15616 — CRLF Injection in Server

CWE-93 — CRLF Injection CWE-74 — Injection6 documents4 sources

Severity

4.3MEDIUMNVD

EPSS

0.3%

top 49.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Nextcloud Server

Timeline

PublishedFeb 4

Latest updateMay 24

Description

Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDnextcloud/nextcloud_server< 17.0.0

▶CVEListV5nextcloud/nextcloud_server17.0.0

🔴Vulnerability Details

GHSA

GHSA-cg3p-cjqp-v7hh: Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long↗2022-05-24

▶

CVEList

CVE-2019-15616: Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long↗2020-02-04

▶

💬Community

Bugzilla

CVE-2019-15613 CVE-2019-15612 CVE-2019-15616 CVE-2019-15617 CVE-2019-15618 CVE-2019-15621 CVE-2019-15623 CVE-2019-15624 CVE-2020-8118 CVE-2020-8119 CVE-2020-8121 CVE-2020-8122 nextcloud: Several CVEs ↗2020-02-21

▶

Bugzilla

CVE-2019-15612 CVE-2019-15613 CVE-2019-15616 CVE-2019-15617 CVE-2019-15618 CVE-2019-15621 CVE-2019-15623 CVE-2019-15624 CVE-2020-8118 CVE-2020-8119 CVE-2020-8121 CVE-2020-8122 nextcloud: Several CVEs ↗2020-02-21

▶

Bugzilla

▶