CVE:CVE-2019-15624
CNNVD:CNNVD-202002-071
Nextcloud是德国Nextcloud公司的一套开源的自托管文件同步和共享的通信应用平台。
Nextcloud Server 15.0.7版本中存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade nextcloud nextcloud_server to a higher version than 14.0.11,15.0.8,and avoid the version (,14.0.11),[15.0.0,15.0.8); Upgrade opensuse backports to a higher version than sle-15:sp1,and avoid the version sle-15:sp1; Upgrade suse suse_linux_enterprise_server to a higher version than 12,and avoid the version 12