CVE-2019-15614 - Missing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files

MEDIUM

Missing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files

Published Feb 4, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.78%

Missing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Nextcloud iOS App	unknown	Affected 2.25.0

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6571		Advisory
https://hackerone.com/reports/575562		x_refsource_MISCPermissions RequiredThird Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2020-003		x_refsource_MISCVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hackerone

Published Feb 4, 2020

Updated Aug 5, 2024

Reserved Aug 26, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner hackerone

Published Feb 4, 2020

Updated Aug 5, 2024

GitHub

No data