PT-2020-9739
CVE-2019-15616
·
Published
2020-02-04
·
Updated
2020-10-15
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud version 16
Description
The issue allows for DNS pollution when dangling remote share attempts are made in Nextcloud 16, particularly when running for an extended period.
Recommendations
For Nextcloud version 16, consider restricting access to remote share functionality as a temporary workaround until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾