CVE-2019-5452

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.

CVSS v3.1

2.4 LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.43% chance of exploitation in the next 30 days, 36th percentile

Published

2019-07-30

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://hackerone.com/reports/534541

References

• CVE Record
• NVD entry

Related

• CVE-2019-5450
• CVE-2019-5453
• CVE-2019-5447
• CVE-2019-5455
• CVE-2019-5444
• CVE-2019-5457