Calendar Event Name Leakage in Nextcloud Server (prior to version 15.0.1)

Calendar Event Name Leakage in Nextcloud Server (prior to version 15.0.1)

CVE-2019-5449 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events.

Learn more about our Cis Benchmark Audit For Server Software.